fn decode_and_validate(
token: &str,
key: &DecodingKey,
allowed_algs: &[Algorithm],
) -> Result<HashMap<String, Value>, String>Expand description
Verifies the token signature (against key, restricted to allowed_algs)
and exp, returning the decoded claims. Issuer/audience are validated
separately by OpenidConnectPlugin::validate_claims.