How I Found An alg=none JWT Vulnerability in the NHS Contact Tracing App

Due to the nature of the app here, I want to start this blog post with a disclaimer: This describes a minor security flaw in the app that has no impact on its ability to function as part of a Track...