Module 5 -- Vulnerable OIDC Client
Not logged in.
Log in with Kanidm
Attacks
Forge an unsigned token
(sub=ceo), then paste it below.
Audience confusion
: get a valid ID token minted for a
different
client, then submit it here.
Paste any JWT to "authenticate":
Log in with this token