Improper HMAC Signature Verification in auth0/node-jws | Dark Hacker News