Pocket CTFMedium
ReferenceSwitch trackStudent token
Your access token is encoded and stored in a browser cookie.
cm9sZT1zdHVkZW50
What does it decode to, and what proves it was issued by the server?
Role names shown elsewhere in this edition may reveal which audience has higher access.