pub async fn validate_token<T: JwtClaims>( token: &str, jwks: &JwksStore, expected_issuer: &str, expected_audience: Option<&str>, ) -> Result<T>