OWASP Top10とJWT
https://github.com/OWASP/Top10/blob/master/2021/docs/A01_2021-Broken_Access_Control.md
https://github.com/OWASP/Top10/issues/544
https://twitter.com/ockeghem/status/1436334482936659982?s=20
https://twitter.com/ockeghem/status/1436274662011330561?s=20
https://twitter.com/s01/status/1436338211727446020?s=20
https://twitter.com/darutk/status/1436445092156358657?s=20
https://twitter.com/ritou/status/1436447447476170755?s=20
https://twitter.com/ritou/status/1436381748535775233?s=20
https://twitter.com/_nat/status/1436604281327702022?s=20
https://twitter.com/ockeghem/status/1436548051670159375?s=20
https://twitter.com/fushiroyama/status/1436518847322882054?s=20
https://zenn.dev/ritou/articles/4a5d6597a5f250
https://ritou.hatenablog.com/entry/2021/09/05/100000
https://qiita.com/TakahikoKawasaki/items/1c1bcf24b46ebd2030f5?utm_campaign=post_article&utm_medium=twitter&utm_source=twitter_share
https://fly.io/blog/api-tokens-a-tedious-survey/
https://openid.net/specs/openid-connect-self-issued-v2-1_0-03.html
https://zenn.dev/ritou/articles/49518bac3565f9
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-introspection-response
https://datatracker.ietf.org/doc/html/draft-ietf-oauth-jwt-introspection-response
https://zenn.dev/ritou/articles/560ee21f03a727
https://www.listennotes.com/podcasts/security/what-do-we-do-about-jwt-feat-luEn67hUkyP/