JWT authentication bypass via algorithm confusion && with no exposed key

“بسم الله الرحمن الرحيم ”