Verifies tokens using a single local public key (RSA or EC).
Accepted JWS algorithm names (e.g. "RS256"). Empty means all algorithms matching the key type.
"RS256"