JWT authentication bypass via algorithm confusion | PortSwigger Academy tutorial

PortSwigger Academy Lab: https://portswigger.net/web-security/... Free Burp Suite Professional trial: https://portswigger.net/burp/pro/trial List of standard endpoints for public JSON Web Keys: /.well-known/jwks.json /jwks.json /auth/jwks /api/jwks /keys /security/jwks /public-keys