Since we generate release notes automatically from the commits, we should ensure that all commits are made using the "Conventional Commits" style. Perhaps using something like this action.

There is currently no way to access the internal token value.

Since API servers tend to be long-running processes, it would be nice to have a way to re-pull the JWKS to reflect changes that may have occurred since the initial load.

Hello,

Would it be an adequate change to make audience optional? Currently, it is always added to the validator; however, it might not necessarily be present in tokens, depending on the setup at hand.

Hi, thank you for this great library!

We would like to use reqwest with the rustls-tls feature, but this library uses the default native-tls feature with no way to change it. For reference, axum itself removes the (default) native tls feature and lets the dependent choose how to enable it instead: https://github.com/tokio-rs/axum/blob/main/axum/Cargo.toml#L120