validate
Allows you to perform additional validations on the JWT payload.
This callback is required. If you do not configure it, the provider initialization throws an IllegalArgumentException.
Return
a principal (usually an instance of JWTPrincipal) or null