Raise exception for expired JWTs? about joserfc

[lepture]

Currently, you need to use JWTClaimsRegistry to validate claims.

https://jose.authlib.org/en/dev/migrations/pyjwt/#verify-exp

[nextmat]

Ah excellent. I didn't understand this before, very helpful. Thanks!

[jashwant]

This is really crucial and should be part of readme that it won't throw error on expired token unless you specifically validate it.
I am using jose as part of authlib and here's how I am validating.

from authlib.jose import jwt

payload = jwt.decode(token, 'SECRET_KEY')
payload.validate()