Coming soon — this article is being prepared. Below are its question, intended outcome, and place in the story.
The question
How can you reject tokens with invalid issuer, audience, or lifetime?
What we will work through
Reject tokens with invalid issuer, audience, or lifetime.
Before you begin
Previously covered: Inside a JWT: header, payload, and signature; Symmetric and asymmetric token signatures.