Questions
10 of 25
1How do you register a global JWT guard so all routes are protected by default in NestJS?
2How do you implement a local (username/password) Passport strategy in NestJS?
3How do you implement API key authentication as an alternative to JWT in NestJS?
4How do you implement JWT authentication in NestJS with access and refresh tokens?
5What is the difference between AuthGuard('jwt') from Passport and writing a custom JwtAuthGuard in NestJS?
6What is RBAC and how do you implement a basic roles guard in NestJS?
7How do you implement JWT token revocation (blacklisting) without a database lookup on every request in NestJS?
8How do you implement brute force protection on the login endpoint in NestJS?
9What is PKCE and when is it required in OAuth2 flows in NestJS?
10What is Passport.js and how does it integrate with NestJS?
11How do you implement session-based authentication in NestJS?
12How do you implement two-factor authentication (2FA) with TOTP in NestJS?
13How do you secure session cookies against common attacks (CSRF, XSS, session fixation) in NestJS?
14What is the difference between RBAC and ABAC and when would you use each in NestJS?
15How do you implement row-level (resource-level) authorization to ensure users can only access their own records in NestJS?
16How does the validate() method in a Passport strategy relate to the NestJS request lifecycle?
17How do you test authentication guards and strategies in NestJS?
18How do you implement JWT refresh token rotation with secure storage in NestJS?
19What is the difference between JWT and session-based authentication and when do you choose each in NestJS?
20How do you implement ABAC with CASL in a NestJS application?
21How do you implement permission-based authorization at the field level in a GraphQL resolver in NestJS?
22How does the OAuth2 authorization code flow work and how do you implement it with Passport in NestJS?
23How do you implement an OAuth2 Authorization Server in NestJS?
24What should and should not go inside a JWT payload?
25How do you implement multi-tenant authentication where each tenant has its own JWT secret in NestJS?
