JWT (not) revoked token¶

RootMe challege: JWT - Revoked token:

Two endpoints are available :

POST : /web-serveur/ch63/login
GET : /web-serveur/ch63/admin

Gain access to the admin endpoint.

Developer blacklists full JWT or hash of the JWT, instead of revoking the JTI (JWT id).

Change request method to POST:

Get token for admin:admin:

Use the token to get the flag (add an = at the end of it).