[Solved] An API uses token authentication but tokens never expire. What is a major security concern here? — Ans: Tokens can be reused indefinitely if stolen | Rest API

Rest API - Authentication and Authorization

An API uses token authentication but tokens never expire. What is a major security concern here?

ATokens will cause the API to slow down

BTokens can be reused indefinitely if stolen

CTokens will automatically refresh every hour

DTokens prevent unauthorized access completely

Step-by-Step Solution

Solution:

Step 1: Understand token expiration importance
Tokens that never expire can be used forever if stolen, increasing risk.
Step 2: Identify the security concern
Tokens can be reused indefinitely if stolen correctly states the risk of indefinite reuse of stolen tokens.
Final Answer:
Tokens can be reused indefinitely if stolen -> Option B
Quick Check:
Non-expiring tokens risk = Indefinite misuse [OK]

Quick Trick: Always set token expiration to limit misuse [OK]

Common Mistakes:

Master "Authentication and Authorization" in Rest API

9 interactive learning modes - each teaches the same concept differently

More Rest API Quizzes

An API uses token authentication but tokens never expire. What is a major security concern here?