Write-up3 min
The JWT that trusted its own header
Personal lab
A lab write-up on an authentication bypass through JWT algorithm confusion — the classic 'alg: none' and its slightly less obvious RS256-to-HS256 cousin.
- Write-ups
- Web Security
- Authentication