According to [JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens](https://datatracker.ietf.org/doc/html/rfc9068) the iat claim is specified as required in [section 2.2](https://datatracker.ietf.org/doc/html/rfc9068#name-data-structure).
According to JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens the iat claim is specified as required in section 2.2.