func getClaimsFromToken(r *http.Request, token string) (map[string]interface{}, error) {
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.