[Missing] JWT review

[Bankde]

Topic:

• Correct JWT format.
• Proper JWT algorithm in header - None MUST be rejected.
• Do NOT put confident information in JWT body.
• Strong signature.

[Bankde]

(CVE-2015-2951) The alg=none signature-bypass vulnerability
(CVE-2016-10555) The RS/HS256 public key mismatch vulnerability
(CVE-2018-0114) Key injection vulnerability
(CVE-2019-20933/CVE-2020-28637) Blank password vulnerability
(CVE-2020-28042) Null signature vulnerability