Token validation guidelines
General claim validation
- Validate that the token can be decrypted
- Validate the environment (
env), it must be “production.” - Validate the issue time (
iat), it must be in the past but not exceed 24h - Validate the expiration date (
exp), it must be in the future but not exceed 24h