From 8d2d82764f9929943994b2a5c7a2021764e4106a Mon Sep 17 00:00:00 2001
From: Nanne Baars <nanne.baars@owasp.org>
Date: Sun, 14 Mar 2021 15:37:16 +0100
Subject: [PATCH] Assignment 8 loads JWT key again

---
 webgoat-lessons/jwt/src/main/resources/html/JWT.html       | 3 ++-
 webgoat-lessons/jwt/src/main/resources/js/jwt-weak-keys.js | 5 +++++
 2 files changed, 7 insertions(+), 1 deletion(-)
 create mode 100644 webgoat-lessons/jwt/src/main/resources/js/jwt-weak-keys.js

diff --git a/webgoat-lessons/jwt/src/main/resources/html/JWT.html b/webgoat-lessons/jwt/src/main/resources/html/JWT.html
index 416f28ab6..d5cb0aad8 100644
--- a/webgoat-lessons/jwt/src/main/resources/html/JWT.html
+++ b/webgoat-lessons/jwt/src/main/resources/html/JWT.html
@@ -134,7 +134,8 @@
 
 <div class="lesson-page-wrapper">
     <div class="adoc-content" th:replace="doc:JWT_weak_keys"></div>
-    <div id="secrettoken"></div>
+    <script th:src="@{/lesson_js/jwt-weak-keys.js}" language="JavaScript"></script>
+    <pre id="secrettoken"></pre>
 
     <div class="attack-container">
         <div class="assignment-success"><i class="fa fa-2 fa-check hidden" aria-hidden="true"></i></div>
diff --git a/webgoat-lessons/jwt/src/main/resources/js/jwt-weak-keys.js b/webgoat-lessons/jwt/src/main/resources/js/jwt-weak-keys.js
new file mode 100644
index 000000000..9cf51f46b
--- /dev/null
+++ b/webgoat-lessons/jwt/src/main/resources/js/jwt-weak-keys.js
@@ -0,0 +1,5 @@
+$(document).ready(
+		function(){
+				$("#secrettoken").load('/WebGoat/JWT/secret/gettoken');
+		}
+	);
\ No newline at end of file