https://cyberkhalid.github.io/posts/jwtc/
JWT Authentication Bypass -> Algorithm Confusion - cyberkhalid