API authentication patterns in Svelte - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is API authentication?

API authentication is the process of verifying the identity of a user or system before allowing access to an API. It ensures only authorized users can use the API.

beginner

What is the difference between API authentication and API authorization?

Authentication checks who you are. Authorization checks what you are allowed to do after you are authenticated.

intermediate

What is a common method to authenticate API requests using tokens?

Using Bearer tokens in the Authorization header is common. The client sends a token proving identity with each request.

intermediate

How does OAuth 2.0 help with API authentication?

OAuth 2.0 lets users grant limited access to their data without sharing passwords. It uses tokens to authenticate and authorize API requests securely.

beginner

Why is it important to use HTTPS with API authentication?

HTTPS encrypts data between client and server. This protects tokens and credentials from being stolen during transmission.

Which header is commonly used to send an API token?

A Authorization

B Content-Type

C Accept

D User-Agent

The Authorization header is used to send tokens like Bearer tokens for API authentication.

What does OAuth 2.0 primarily provide?

A Token-based authentication and authorization

B Password storage

C Database encryption

D API rate limiting

OAuth 2.0 provides a secure way to authenticate and authorize API access using tokens.

Which of these is NOT a common API authentication pattern?

A API key

B Bearer token

C CSS styling

D Basic authentication

CSS styling is unrelated to API authentication.

Why should API tokens be kept secret?

A To improve API speed

B To change API endpoints

C To reduce server load

D To prevent unauthorized API access

Tokens prove identity. If leaked, attackers can access the API as the user.

What is the role of HTTPS in API authentication?

A Formats JSON data

B Encrypts data to protect credentials

C Speeds up API response

D Caches API responses

HTTPS encrypts communication, protecting tokens and credentials from interception.

Explain how token-based authentication works in APIs.

Think about how you show a ticket to enter a concert.

Describe the benefits of using OAuth 2.0 for API authentication.

Imagine giving a valet key instead of your car keys.