practitionerOWASP Projects
Test account-recovery questions
Said by Björn Kimminich ·
“If they choose to register with their Google account, there's a little bit more technical way to be that, but that's something that managers can understand if you show them because the Juice Shop behaves silly after doing a proper OAuth 2 authentication with Google.”
Transcript evidence from Bjorn Kimminich -- The Joy of the Vulnerable Web: JuiceShop.