https://cyberkhalid.github.io/posts/jwtw/
JWT Authentication Bypass -> Weak Signing Key - cyberkhalid