JWT public key vs private key signature validation — what is the difference?
问题 I am using this library, node-jwks-rsa, to fetch JWT keys from my auth0 jwks.json file in order to verify that the id_token my application retrieves after authentication is actually coming from my auth provider. Under the hood it uses this method to build a public key PEM export function certToPEM(cert) { cert = cert.match(/.{1,64}/g).join('\n'); cert = `-----BEGIN CERTIFICATE-----\n${cert}\n-----END CERTIFICATE-----\n`; return cert; } (Using the x50c as argument from the .jwks file). which I