Go : Weak JWT signature algorithm