ASVS Requirement 9.1.1

Description

Verify that self-contained tokens are validated using their digital signature or MAC to protect against tampering before accepting the token's contents.