Authorization bypass bug on gmail

credits - not me read it from a medium blog