Closed nodh closed 3 weeks ago
Confirmation claims used in JWTs may be a kid, or contain a jku ... so they need to be verified somewhat more general than just comparing the JSON Web Key inside it.
kid
jku
Confirmation claims used in JWTs may be a
kid
, or contain ajku
... so they need to be verified somewhat more general than just comparing the JSON Web Key inside it.