JWT authentication bypass via flawed signature verification 1 JWT authentication bypass via flawed signature verification 06/12/2024