Verify JSON Web Tokens correctly
Not solvedAn API reads claims from a JWT without checking the signature. Verify it properly and pin the algorithm.
- Level
- Advanced
- Estimated time
- ~30 min
- Points
- 0/60 pts
- Questions
- 0/0 answered
- OWASP
- A07:2025
- OWASP
- A04:2025
- CWE
- CWE-347
auth.js
Test results
Run the tests to check your code. It runs on the server in an isolated sandbox with no network access.