All quizzesMedium
Tokens & Identity — Series 2
Preview — 3 of 10 questions
OAuth2PasswordRequestForm receives scope="read write". Which attribute provides the parsed names?
Aform_data.scopes as a list
Bform_data.scope as a dictionary
Cform_data.username as a list
Dform_data.tokenUrl as text
What distinguishes OAuth2PasswordRequestFormStrict from the permissive form helper?
AIt verifies JWT signatures
BIt requires grant_type=password
CIt stores the submitted password
DIt creates a route automatically
Why should a token endpoint use a generic error for unknown user and wrong password?
ATo make invalid passwords succeed
BTo bypass password hashing
CTo avoid revealing which usernames exist
DTo expose the user table through OpenAPI
Sign up free to play
Answer all 10 questions (7 more), see explanations for every answer, and track your score.