Improper authentication
Failure to verify a user's identity results in improper authentication. This can allow an attacker to acquire privileges to access sensitive data in your application.
def improper_authentication_noncompliant(token):
    import jwt
    # Noncompliant: The verify flag is set to false.
    jwt.decode(token, verify=False)
def improper_authentication_compliant(token):
    import jwt
    # Compliant: The verify flag is set to true.
    jwt.decode(token, verify=True)