I am writing only the JWT token validation or verification. Say there is an external application X, which connects to our Spring Rest API application Y. User has been authen