Introspect JWT token

[eabili0]

IntrospectToken should check if the token is a JWT, and open it locally (without going to hydra)

[claudiosegala]

@abilioesteves just to confirm, the steps to this would be something like:

Configure

1. Retrieve Hydra Public Certificate (HPC) with Json Web Keys Endpoint
2. Store in HydraClient Struct

Instrospect Modification

1. Verify if the token is JWT
   Possible using this regex: /^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;, source.
2. Validate Access Token JWT with HPC
3. Return the info contained in the token

Questions

• Should I find a dependency to take care of the validation of JWT or build my own? We kinda have implemented some simple version for whisper.

[eabili0]

Yes! That's correct! @claudiosegala