Posts tagged: #token-testing

Why the old alg none bug still matters, how it appears in modern services, and how to test for it without theater.