JWT authentication bypass in HarbourJwt via "unknown alg" | Heykuki News