Flask currently only checks if the JWT token is provided, not the actual contents of the token to verify if the user is authorized to make that call. This should be changed to check the contents of the token
Oh right, good catch. I was supposed to do this in 4A, let's leave it as a tech debt for now and I'll get to it at the end. Can be done after the demo and in-time for the symposium.
Flask currently only checks if the JWT token is provided, not the actual contents of the token to verify if the user is authorized to make that call. This should be changed to check the contents of the token