API Testing · Senior · Question 71 of 75
What do you check when an API moves from one auth scheme to another?
- 1Only the new scheme, since the old one is going away
- 2That users have to log in again on every single request
- 3Both schemes during migration, revocation of old tokens and scopes
Show the answer
Correct answer: Both schemes during migration, revocation of old tokens and scopes
Explanation
Mixed periods are risky: old tokens may work too long, or scopes may map wrongly. Tests cover each transition step.