async fn validate_jwt( jwt: &str, jwks_url: &str, issuer: &str, metadata: &HashMap<String, String>, ) -> Result<bool, BoxedError>