Currently there is no format validation for the JTI claim in the DCR request object. According to the UK OB spec the JTI has to be:
- A unique identifier for the JWT.
- The value must be a UUIDv4 GUID.
This issue was created to track the implementation of 2. above.
ob-internal: https://github.com/wso2-enterprise/wso2-ob-internal/issues/1253