No JWT validation

I didn't find any JWT token validation.
In the `Receive.php` file:

```
$idToken = $accessToken->getValues()['id_token'];
$decodedAccessTokenPayload = base64_decode(
    explode('.', $idToken)[1]
);
```

Isn't it a security risk to not validate the JWT signature?