Redirecting you to Reddit in 5 seconds:
https://old.reddit.com/r/netsec/comments/1hj560k/another_jwt_algorithm_confusion_vulnerability