feat: check 'iss' in `verify_oauth2_token` (#500)

Co-authored-by: Tianzi Cai <[email protected]>
3 files changed