You are validating a JWT and want to be sure you use the correct public key. What do you need to check?

Question

Babatunde Ipaye · Accepted Answer

The keyid of the public key is the same as the keyID in the JWT header.

Babatunde Ipaye · Answer

The expiration time of the JWT lies within the expiration time defined in the public key.

Babatunde Ipaye · Answer

The issuer of the public key is the same as the issuer in the JWT header.

Babatunde Ipaye · Answer

The public key hash is the same as the signature hash of the JWT.

List of questions