Spring Security Implementation Overview asked in 3 yoe interview

Spring Security Implementation Overview

• Security is primarily enforced on the backend, as client browsers are considered less secure.
• The backend uses JWT (JSON Web Tokens) for stateless authentication in REST APIs to avoid re-authenticating every request, enhancing performance.
• JWT tokens are passed from frontend to backend via cookies or sessions.
• Tokens come with a TTL (Time To Live), requiring reauthentication upon expiration, handled using refresh tokens.
• For authorization servers, D has used Okta OAuth 2.0 integrated with Spring Security to handle authentication and authorization.