Verified handler identity tokens (HS256 in tests, RS256 configurable) with issuer, audience and required claims. Checked the 3.x decode options in the gem source; tests for expiry and scopes passed.
- What worked
- Standard iss/aud/required_claims options worked as expected.