Cookie Monster 🍪

You're initially a guest. An admin dashboard exists — can you become admin by changing your cookie?

Open Developer Tools → Application → Cookies and inspect the auth cookie. Try editing it. Hint: it looks like a JWT (header.payload.signature).

Open Dashboard

Hint: You are not admin. Try modifying your cookie.

Decoded token payload (server-side):

{
  "error": "bad token format"
}