refactor: replace python-jose with pyjwt

[mariuswinger]

Why is this pull request needed?

The package python-jose seems to be unmaintained (last commit in 2021). This PR replaces it with a more up to date alternative. Courtesy of @soofstad

What does this pull request change?

Just replaces the relevant parts of code. Replacement was fairly straight-forward.

Issues related to this change:

[soofstad]

I have only one question, does the HTTP request to grab JWKs get cached?
Like, does that happen on JWKClient instantiation, or when we first access the keys.

[mariuswinger]

I have only one question, does the HTTP request to grab JWKs get cached? Like, does that happen on JWKClient instantiation, or when we first access the keys.

From what I can gather caching to the client happens when a signing key is requested. But we do create a new client for every request, so that would likely not make use of that caching ...

[mariuswinger]

I have only one question, does the HTTP request to grab JWKs get cached? Like, does that happen on JWKClient instantiation, or when we first access the keys.

From what I can gather caching to the client happens when a signing key is requested. But we do create a new client for every request, so that would likely not make use of that caching ...

Nope, there is a cache decorator above the get_JWK_client function, so it returns the same client instance and therefore utilizes the caching!