INNER CODE UNIT · Python

api_verify

The-Art-of-Hacking/websploit · additional-labs/token-tower/app.py:843

def api_verify():
    """Verify a JWT token"""
    data = request.get_json() or {}
    token = data.get('token', '')
    
    if not token:
        return jsonify({"error": "No token provided"}), 400
    
    try:
        payload = verify_token_vulnerable(token)
        if payload:
            return jsonify({"valid": True, "payload": payload})
        else:
            return jsonify({"valid": False, "error": "Verification failed"}), 401
    except Exception as e:
        return jsonify({"valid": False, "error": str(e)}), 401

View source record →