API authentication (OAuth, JWT, API keys) in HLD - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to identify the type of token used for API authentication.

HLD

if token_type == '[1]':
    print("Use OAuth for user authorization")

Drag options to blanks, or click blank then click option'

AJWT

BOAuth

CAPIKey

DSession

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing API keys with OAuth tokens.

OAuth is a common token type used for user authorization in APIs.

2fill in blank

medium

Complete the code to decode a JWT token payload.

HLD

payload = decode_jwt(token).[1]

Drag options to blanks, or click blank then click option'

Aclaims

Bheader

Csignature

Dpayload

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'header' or 'signature' instead of 'payload'.

The payload part of a JWT contains the claims and user data.

3fill in blank

hard

Fix the error in the API key validation logic.

HLD

if api_key == [1]:
    grant_access()

Drag options to blanks, or click blank then click option'

A12345-ABCDE

Bapi_key

C"12345-ABCDE"

DNone

Attempts:

3 left

💡 Hint

Common Mistakes

Not using quotes around the API key string.

API keys are strings and must be compared as strings with quotes.

4fill in blank

hard

Fill both blanks to complete the OAuth token request flow.

HLD

response = request_token(client_id=[1], grant_type=[2])

Drag options to blanks, or click blank then click option'

A"my_client_id"

B"authorization_code"

C"refresh_token"

D"client_secret"

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'refresh_token' grant type for initial token request.

The client ID is a string identifier, and the grant type for initial OAuth token is 'authorization_code'.

5fill in blank

hard

Fill all three blanks to complete the JWT verification step.

HLD

if verify_signature(token=[1], secret=[2]) and check_expiry(token=[3]):
    allow_access()

Drag options to blanks, or click blank then click option'

Ajwt_token

Bsecret_key

Ctoken

Daccess_token

Attempts:

3 left

💡 Hint

Common Mistakes

Using different variable names inconsistently for the token.

The token parameter should be the JWT token variable, and the secret is the key used to verify the signature.