Web Security Academy -Portswigger| Lab:1 JWT authentication bypass via unverified signature

This New series from Web Security Academy:

In this Video you will Know JSON web tokens (JWTs) , How it works and can leave websites vulnerable to a variety of high-severity attacks.

Demonstration Portswigger| Lab:1 JWT authentication bypass via unverified signature :

Occasionally, developers confuse these two methods and only pass incoming tokens to the decode() method. This effectively means that the application doesn't verify the signature at all