pem

Verifies tokens using a public key parsed from a PEM string.

Supports -----BEGIN PUBLIC KEY----- (X.509/PKCS#8) for both RSA and EC; the key type is detected automatically. Throws IllegalArgumentException if the PEM cannot be parsed or the key type is unsupported.