JWT claim validation and authorization
Lab 08 / 13 · Return to Arena
Welcome to this intentionally vulnerable training application.
Objective: JWT claim validation and authorization. Inspect requests and responses with Burp Suite or browser developer tools. Use only the synthetic accounts and data supplied here.
Do not attack the arena portal or any system outside this lab.
Starting point: Inspect the supplied token
Sample unsigned training token: eyJhbGciOiJub25lIn0.eyJzdWIiOiJhbGljZSIsInJvbGUiOiJ1c2VyIn0.
Authorized training only · synthetic data · lab 08