Introduction JWT Validation Stolen JWTs Managing a Cryptographic Key Hacking