Banking Secure Coding L4: Verify JWTs and Reject Tampered Tokens

<p>Restore JWT verification and prove that valid, modified and expired token cases behave correctly.</p><p>Practice on the fictional <strong>Meridian Bank</strong> website inside your enrolled BartMan project. Lesson two contains a complete workspace with Browser &amp; DevTools, HTTP inspector, API client, a code correction editor, the relevant security tools and evidence checks. Observe the vulnerable state, complete the correction or review, and retest the same cases. All accounts and transactions are fictional.</p><p>Four detailed lessons preserve the manual's learning outcomes, guided demonstration, participant procedure, code examples, expected results and model-answer debrief. Required project time: 75 minutes. Optional extensions are separate. The practice bank is delivered in a protected lesson and requires enrolment in this project.</p>

Tools: Python, PyJWT, JWT, HTTP request editor, Browser & DevTools, HTTP inspector, API client, Meridian Bank