How I Found an Alg=None JWT Vulnerability in the NHS Contact Tracing App | Hacker News Reader