JWT Alg Confusion and 2FA Bypass via Race Condition

February 20, 2025