Stolen token
Difficulty 2 of 5
Each API instance checks a session token once, then trusts it for 24 hours. A revoked session keeps working on the other instances. A revoked token must stop within 5 minutes. Keep p99 under 80 ms. You have 5 edits.
0:05. A user reset the password after a phishing email. The stolen token still opens the account. Graph: freshness keeps rising.
Limit 1/s per account · all codes tried in 12 days
Goals and limits
- Data age
- under 300 s
- p99 latency
- under 80 ms
- Error rate
- under 0.1%
- Monthly cost
- under 60 USD/mo
- Parts you can add
- Managed pub/sub, Managed queue, Local cache, Redis cache
- Part limit
- 12
- Edit limit
- 5
- Traffic
- 2,000 req/s
Concepts
How players did
Player results load from the server.