jwt token: add required claims

Author: ikreymer

backend/btrixcloud/auth.py

@@ -112,7 +112,13 @@ def generate_jwt(data: dict, minutes: int) -> str:
 # ============================================================================
 def decode_jwt(token: str, audience: Optional[List[str]] = None) -> dict:
     """decode JWT token"""
-    return jwt.decode(token, PASSWORD_SECRET, algorithms=[ALGORITHM], audience=audience)
+    return jwt.decode(
+        token,
+        PASSWORD_SECRET,
+        algorithms=[ALGORITHM],
+        options={"require": ["exp", "aud", "sub"]},
+        audience=audience,
+    )
 
 
 # ============================================================================