RSA in JavaScript Part 2: The JWT Is Where You'll Actually Meet It

Most JavaScript developers never call an RSA function directly. They verify an RS256 token, and two classic attacks turn that into an authentication bypass — both demonstrated here, both fixed by one line.

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.