Lab: JWT authentication bypass via jku header injection

Published --