Perform a set of additional validations against a JWT token:
Do not use the NONE signature algorithm.
Have a EXP claim defined.
The token identifier (JTI claim) is NOT part of the list of revoked token.
Match the expected type of token: ACCESS or ID or REFRESH.