JWT Attack Lab — Part 8: Algorithm Confusion, and a Bug the Attack Uncovered By Accident

Part 8, the final stage in a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 7 closed a gap in expiry enforcement. This last stag