OhMyQl — Full Writeup

SQLi in GraphQL login to mint a flagOwner JWT and unlock /admin.