Author: Rph
We built an in-house To Do list for our employees using state-of-the-art OpenID Connect authentication. Our admin recently got hacked and all their to-dos got removed. Thankfully, we have an older manual backup of their extremely valuable account. Can you help us recover that backup?
Flag: irisctf{per_tenant_databases_are_a_cool_concept_indeed}
No XSS, No SSRF