picoCTF 2023 Java Code Analysis?!?

Modify a JWT token that has a non-random signing key

[@matthewding7089]

Why do you change the userID to 2?

[@carlislemc]

Switching to a different userID gives me the opportunity to see if I can be a different user with different privileges.

[@EzProgrammingPro]

@@carlislemc it's weird because in their code "4" -> admin which is odd because trying it gives an error

[@carlislemc]

@@EzProgrammingPro I didn't dig deeply into this after I got the flag. brandon-t-elliott.github.io/java-code-analysis is a nice writeup.