Building Microservices API in Go - JWT Tokens

The video tutorial covers JSON Web Tokens (JWT), explaining their structure, including header, payload, and signature. It discusses the importance of claims, both registered and private, and emphasizes security by ensuring tokens are signed with a secret key. The tutorial also explores creating JWTs using libraries, particularly in Golang, and defines user roles and permissions for a banking application. Finally, it outlines building an authentication service to create and verify tokens, ensuring secure and authorized access to APIs.

What are the three main components of a JWT?

• Header, Content, and Signature

• Title, Content, and Footer

• Header, Body, and Footer

• Header, Payload, and Signature

What is the purpose of the signature in a JWT?

• To store user data

• To define the token's expiration

• To verify the token's integrity

• To encrypt the payload

Which of the following is a registered claim in a JWT?

• Token's expiration time

• User's email

• User's role

• User's password

How does the server verify the integrity of a JWT?

• By checking the user's password

• By checking the token's expiration date

• By comparing the signature with a secret key

• By decoding the payload

In the context of a banking application, what can an admin role do?

• Only make transactions in their own account

• Create new accounts and manage transactions

• Only view their own account details

• View all customer details and manage transactions

What information is stored in the users table for a user role?

• User ID, password, and account balance

• User ID, password, and role

• User ID, password, role, and customer ID

• User ID, role, and account balance

What is the role of the auth service in the application?

• To store user passwords

• To encrypt user data

• To create and verify JWTs

• To manage database connections