see https://developer.apple.com/documentation/sign_in_with_apple/processing_changes_for_sign_in_with_apple_accounts
decoe token with optional expiry validation
allows to check whether the validate result was errored because of an expired signature
validate
