JwtKeySource

Describes where the key(s) used to verify a JWT signature come from.

This is a library-agnostic description consumed by a JwtDecoder. Register via the jwt { } block (keySource) or pass to JwtVerification.builder.

Types

Verifies tokens using keys resolved from a remote JWKS endpoint, matched by kid.

Verifies tokens using a single local public key (RSA or EC).

Verifies tokens using a shared HMAC secret.