JWT authentication bypass via weak signing key 1 JWT authentication bypass via weak signing key Dec 6, 2024