Silent HMAC Key Contamination: Uncovering a Logic Flaw in Burp's JWT Editor Extension

How a failing Web Security Academy lab led to a root-cause analysis of a hidden bug JWT...