WKID

JWTs are typically issued as ID Tokens or Access Tokens, and to verify their signatures, you need to fetch the public key from the jwks_uri (JSON Web Key Set). That jwks_uri address is defined in the well-known document. well-known endpoint → JWKS URI → fetch public key for JWT verification