keySource

Where verification keys come from (local public key, PEM, HMAC secret, or JWKS). Required.

See JwtKeySource factory methods. Throws SecurityConfigurationException if unset when the strategy is built.