JWT Algorithm Confusion Attacks in Production APIs
Attackers forge tokens by exploiting how servers verify JWT signatures.
Andre Ford
Contributing Editor
Andre Ford is a contributing editor at Vulnerability Mechanics covering authentication flaws. Based in Copenhagen, Andre has written for Vulnerability Mechanics since 2017.
1 story · Copenhagen
Attackers forge tokens by exploiting how servers verify JWT signatures.