-record(jwt_validation_options, {
    issuer :: gleam@option:option(binary()),
    audience :: gleam@option:option(binary()),
    clock_skew :: integer(),
    require_exp :: boolean(),
    max_token_age :: gleam@option:option(integer()),
    jti_validator :: gleam@option:option(fun((binary()) -> boolean())),
    kid_policy :: gose@jwt:kid_policy()
}).