nextjs-auth0 MCD demo

Security research demo for a report filed against the Auth0 Next.js SDK. Not a real service. No real tenant, no real users, no real data.