water/server/app/miniapi/auth/TokenVerifier.php

<?php

declare(strict_types=1);

namespace app\miniapi\auth;

interface TokenVerifier
{
    /** Validate issuer/audience, expiry, revocation and user state. Throw ApiException(40101,...,401) on rejection. */
    public function verify(string $token): Principal;
}