Security lab
JWT Attacks
The API uses JWT for auth but accepts the 'none' algorithm. Forge an admin token without knowing the secret.
Security lab
The API uses JWT for auth but accepts the 'none' algorithm. Forge an admin token without knowing the secret.
Loading lab…