JWT Attack Lab — Part 2: What's Actually Inside a JWT (and Why It Matters Later)

Part 2 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. In Part 1, the project got its foundation — a Flask app, an isolated envir