Research: Access tokens

JWT Access Token Validation: Bind the Credential to One API

Check token type, signature, issuer, audience, time limits and authorization before an API accepts a JWT.