A signature algorithm accepted from an outside issuer. 'EdDSA' also admits a
token whose header carries the fully-specified alg: 'Ed25519' (RFC 9864);
both require an OKP/Ed25519 key. HMAC algorithms and none are never
accepted from an issuer, whatever the allowlist says.
A signature algorithm accepted from an outside issuer.
'EdDSA'also admits a token whose header carries the fully-specifiedalg: 'Ed25519'(RFC 9864); both require anOKP/Ed25519key. HMAC algorithms andnoneare never accepted from an issuer, whatever the allowlist says.