Function verify_token 

pub async fn verify_token(
    options: &VerifyTokenOptions<'_>,
    resolver: &dyn KeyResolver,
) -> Result<VerifiedToken, TokenError>

Verify an agent, person or auth token presented in Signature-Key.

In order: the typ is recognised and accepted here; the claims every token of that kind needs are present; its cnf.jwk is the key that signed the HTTP request; the issuer’s key, found through resolver, signed it; and only then its expiry, iat and aud. Nothing in the claims is believed before the signature verifies, so token_expired always means the named issuer minted a token that has run out.

Revocation is not checked here.