CTF › DBSE Monthly #1: Warm-up › Web
The token that trusts itself 300 pts · Hard
A vendor's API issued this token to a guest account. Read what it trusts:
eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJndWVzdCIsInJvbGUiOiJtZW1iZXIiLCJmbGFnIjoiZGJzZXthbGdfbm9uZV9pc19ub3RfYW5fYWxnfSIsImlhdCI6MTc4ODcwMDAwMH0.
The flag is inside.
Hint
Three parts separated by dots. The middle one is base64url-encoded JSON. The last one is missing for a reason.
Sign in to submit.