DefaultIdTokenValidator
Default IdTokenValidator implementing the OpenID Connect Core 1.0 ID Token Validation checks.
Validates: issuer, audience, HTTPS, algorithm (RS256), expiration, issued-at grace period, nonce, max_age, and subject.