Checks a proof against what the request expects. Never throws: anything unparseable is malformed.
Does not keep a replay cache of jti; a proof is bound to one token (ath) and to MaxSkewSeconds, so a
replay needs both the proof and that token within the window.
Checks a proof against what the request expects. Never throws: anything unparseable is
malformed. Does not keep a replay cache ofjti; a proof is bound to one token (ath) and toMaxSkewSeconds, so a replay needs both the proof and that token within the window.