JWT Key Confusion

web · hard · 400 pts

Acme's auth uses RS256 with a public key at /pubkey. Forge an admin token. --- ### Run locally ```bash cd content/aysec/AYSEC-CTF docker compose up jwt-confusion ``` Then open `http://localhost:8000` and start solving.