Code AnalysisIntermediate 60s
JWT introspection missing signature check
Auth middleware:
claims = jwt.decode(token, options={"verify_signature": False})
if claims["exp"] > now(): allow()
What is the vulnerability?
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.