Notes
JWTs are signed, not encrypted (unless JWE). The header and payload are Base64url encoded.
Common CTF attacks:
- Change alg to "none" and strip signature.
- Change alg from RS256 to HS256 and sign with public key.
- Brute-force weak HMAC keys (e.g. using hashcat).