Skip to content

Tracks Drills Topics Technologies Tech stacks Skill areas

Tracks Drills Topics

Loading

Aporeon

Technical interview practice, from one developer to another.

About Privacy Terms

Drills

Pick a focused question that fits your time, stack, and interview goal.

How much time do you have?

Show one-drill sessions you can finish now.

Search

Track

Practice style

Level

More filters1

Topic

Technology

Tech stack

Skill area

13 results across 1 active filter

Page 1 of 1

Concept questionMedium~7 min

ASP.NET Core authentication schemes, challenge, and forbid

Explains how ASP.NET Core schemes select handlers and why authenticate, challenge, and forbid produce different security behavior.

.NETASP.NET Core

Concept questionMedium~7 min

Audit privileged admin actions

Explains why sensitive admin actions need authorization, reason capture, before/after context, and tamper-resistant audit records.

.NETASP.NET CoreJWT

Practice drill

Concept questionMedium~7 min

Authenticate service-to-service API calls

Explains API keys, client credentials, managed identity, mTLS, scopes, rotation, and per-client observability.

.NETASP.NET CoreAzureJWTOAuth2+1

Coding problemMedium~25 min

Authorize a loaded resource by ownership

Loads a resource once, evaluates owner-or-capability authorization, and avoids trusting route ownership claims.

.NETASP.NET CoreC#EF Core

Concept questionHard~9 min

Authorize tenant-scoped API requests

Explains trusted tenant context, membership checks, tenant-scoped queries, cache keys, and background job propagation.

.NETASP.NET CoreJWT

Comparison questionMedium~7 min

Compare roles, permissions, and capabilities

Explains how roles group permissions while API policies enforce specific capabilities and resource rules.

.NETASP.NET CoreJWT

Concept questionHard~9 min

Handle stale token claims after permission changes

Explains what happens when roles or tenant membership change while access tokens still contain old claims.

.NETASP.NET CoreJWT

Concept questionMedium~7 min

Prevent IDOR with resource ownership checks

Explains insecure direct object reference risks and how APIs enforce ownership, tenant scope, and authorization per resource.

.NETASP.NET CoreJWT

Coding problemEasy~15 min

Protect an endpoint with a capability policy

Maps a named capability to an ASP.NET Core policy and enforces it at the endpoint boundary.

.NETASP.NET CoreC#

Comparison questionEasy~5 min

Separate authentication and authorization in an API

Explains identity versus permission checks in API request handling and why both boundaries need server-side enforcement.

.NETASP.NET CoreJWT

Coding problemMedium~25 min

Stream an authorized file download

Authorizes metadata before opening storage and streams the file with safe headers and range support.

.NETASP.NET CoreC#

Concept questionMedium~7 min

Use an external identity provider without losing app authorization

Explains the boundary between OAuth/OIDC identity, application users, claims mapping, roles, and app-specific permissions.

.NETASP.NET CoreJWTOAuth2OpenID Connect

Concept questionMedium~7 min

Use ASP.NET Core policies for authorization

Explains policy-based authorization, requirements, handlers, claims, capabilities, and resource-aware checks.

.NETASP.NET CoreJWT