The Complete Strapi™ Course with Plugins and Deployment - Authentication and Authorization: The Theory

The video tutorial explains the roles and permissions in Strappy, focusing on authenticated users. It covers how registered users can create guest posts, which are moderated by admins. The tutorial also details Strappy's authentication system, including email and third-party providers, and the authorization process using JWT tokens. It demonstrates how JWT tokens are used to authenticate users and authorize operations, ensuring secure access to restricted data.

What is the default role created by Strappy for users who log in?

• Admin User

• Authenticated User

• Guest User

• Public User

What operation can authenticated users perform on blog posts according to the tutorial?

• Delete posts

• Create draft posts

• Edit existing posts

• Publish posts directly

What is the role of the admin panel in managing user permissions?

• To reset user passwords

• To create new user accounts

• To monitor user activity

• To allow or restrict operations for different user roles

Which of the following is NOT a method for user registration in Strappy?

• SMS verification

• Email and password

• Google

• Facebook

What is the primary purpose of the JWT token in Strappy's authorization system?

• To encrypt user data

• To store user preferences

• To verify user identity and authorize actions

• To manage user sessions

How does Strappy ensure that a request is coming from a registered user?

• By using a CAPTCHA

• By requiring a password for every request

• By checking the user's IP address

• By including a JWT token in the request header

What happens if a JWT token is invalid or does not belong to a user with the right permissions?

• The request is automatically approved

• The request is redirected to a login page

• The request is denied access to restricted data

• The user is logged out