  def make_hs256_token(payload = nil)
    payload = { sub: 'abc123' } if payload.nil?
    JWT.encode payload, client_secret, 'HS256'
  end
The software does not verify, or incorrectly verifies, the cryptographic signature for data.