Support introspection of access token in jwt plugin

I think it would be very grateful if the jwt plugin supports the introspection of access tokens to verify that the access token is still valid and authenticated via the introspection endpoint of the oidc provider.

I think it could be configureable as in the oidc plugin, so anyone who need this can activate it:

features: {
  /**
  * check token validity with provider during assertion process
  */
  introspect_access_token: true,

  /**
   * if introspect_access_token is true, how long in seconds to cache the result
   * if not a number greater than 0, the introspection endpoint will be requested *every* verify request
   * NOTE: the cache is stored on a per-eas-session basis vs a per-token (jti) basis
   */
  introspect_expiry: 0,
},

[travisghansen]

Oh, yeah it will introspect every request (unless introspection cache is turned in then whenever appropriate).

[travisghansen]

I should be able to add both…been a bit of a crazy week but when I get a little time I’m sure both requests can get knocked out.