Explain how browser authentication works with JWTs
Quick Overview
This question evaluates understanding of browser-based authentication with JWTs, covering token storage trade-offs, how tokens are sent with requests, refresh token/session renewal patterns, common security risks (XSS, CSRF), and differences from traditional server-side sessions.
Microsoft
Feb 11, 2026, 12:00 AM
Software Engineer
Onsite
Software Engineering Fundamentals
0
0
Loading...
Explain, at a high level, how authentication typically works in a browser-based web app when using JWTs.
Cover:
-
Where the token is stored (e.g., memory,
localStorage, cookies) and trade-offs. - How the browser sends the token on subsequent requests.
- Refresh tokens / session renewal patterns.
- Common security risks (XSS, CSRF) and mitigations.
- How this differs from traditional server-side sessions.
Solution
Show