Verifies a JWT's signature against an arbitrary JWKS document (e.g. a third-party OIDC provider's published key set) and returns its decoded payload. Pure signature verification only — issuer, audience, and expiry are the caller's responsibility.
Verifies a JWT's signature against an arbitrary JWKS document (e.g. a third-party OIDC provider's published key set) and returns its decoded payload. Pure signature verification only — issuer, audience, and expiry are the caller's responsibility.