Return an error when the JWT is not valid
Currently, we silently ignore errors in the JWT and try other authentication mechanisms.

Instead, we should return an error when the JWT is not valid. It will help trigger a JWT renewal, in particular.

We should give the reason as the error_code (passed in the X-Error-Code header) to be able to discriminate between a key error, an algorithm error, or an expiration error, among others
Return an error when the JWT is not valid: Currently, we silently ignore errors in the JWT and try other authentication mechanisms.

Instead, we should return an error when the JWT is not valid. It will help trigger a JWT renewal, in particular.

We should give the reason as the error_code (passed in the X-Error-Code header) to be able to discriminate between a key error, an algorithm error, or an expiration error, among others