Abusing JWT public keys without the public key – Silent Signal Techblog

https://blog.silentsignal.eu/2021/02/08/abusing-jwt-public-keys-without-the-public-key/