feat: add options.type

[ewan-chalmers]

By submitting a PR to this repository, you agree to the terms within the Auth0 Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

• Include option { type: <type> } in jwt.verify().
• It must match jwt.header.typ.
• Per https://datatracker.ietf.org/doc/rfc9068/, the typ for access_token is at+jwt.
• Where token issuer respects this, this is a way to differentiate access_token from id_token.

References

#1004

Testing

• Include option { type: <type> } in jwt.verify().

• This change adds test coverage for new/changed/fixed functionality

Checklist

• I have added documentation for new/changed functionality in this PR or in auth0.com/docs
  • N/A
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used, if not the default branch