Allow to specify the location of the token.

[az-nextsec]

Checklist

• [X] I have looked into the Readme and Examples, and have not found a suitable solution or answer.
• [X] I have searched the issues and have not found a suitable solution or answer.
• [X] I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• [X] I agree to the terms within the Auth0 Code of Conduct.

Describe the problem you'd like to have solved

Currently the token is automatically looked up in query, body and header. I want to disallow token to be supplied in anything OTHER than header, but it doesn't seem possible now.

Describe the ideal solution

Extend JwtVerifierOptions to allow us to specify the locations where to look for the token.

Alternatives and current workarounds

None discovered. Potentially writing a custom auth Handler wrapping jwtverifier?

Additional context

No response