Bypass

The Client is in full control. Bypass the authentication and read the key to get the Flag.

Solution