ID Token Signature verification

After receiving an ID Token (JWT), the Client application must verify the signature on it before using it. Below is sample code using following dependency to verify signatures. Readers can choose their choice of approved JWT verification toolkit, below is just a sample and not a recommendation.It’s worth noting that this code sample is built on the current pattern of ensuring that HMAC based signatures will be used for ease-of-use.It’s also worth noting that sample code below also ensures that signatures were performed on JWT, if algorithm was “none” or “null” below sample code will result in exception invalidating signature verification process.

org.bitbucket.b_c jose4j 0.4.4