Your question is JWT Authentication Workflow. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Explain JWT authentication and its workflow (used in your project).
Asked in the Technical Round 2 stage. Explain how a user obtains a token, how an API validates and authorizes it, how expiration and refresh work, and which security risks and controls apply.
