JWT authentication bypass via unverified signature 1 JWT authentication bypass via unverified signature Dec 6, 2024