3 Broken Auth Bugs Cursor Keeps Writing Into JWT Code

TL;DR Cursor generates jwt.decode instead of jwt.verify, which skips signature validation...