Validates JSON Web Tokens (JWTs) issued by the authentication service, ensuring they are authentic and compliant with the expected issuer, audience, and cryptographic signatures.
Validates JWTs issued by clients to the authentication service, supporting scenarios such as private JWT client authentication and the validation of request objects. This class plays a crucial role in ensuring that tokens received from clients are legitimate, properly signed, and authorized for use within the authentication service.
Validates JWTs minted by this authorization server itself (its own access tokens, refresh tokens and Registration Access Tokens), checking signature against the server's signing keys, issuer equality, and audience membership against the configured client registry.