well i was trying to answer the question in general way how authentication or authorization works but the problem is the interviewer rather hear me saying those Google theoretical explanation and definitions of those rather to have a conversation . This went bad I have told him i haven't worked on the security part of the application so i am not aware of how that works exactly . So in the middle of the interview he got me saying the encryption and boy he jumped on what kind of encryption and what is the token key how is it transferred from this to another session well i haven't worked on this area. the interviewer has no patience of understanding the candidate profile he just sees the keywords and asks the questions on that.