Where an outside issuer's signing keys are read from: an explicit JWKS URL, or OpenID Connect discovery (<issuer>/.well-known/openid-configuration, whose jwks_uri is used). Both URLs must be https, or http on a loopback host.
<issuer>/.well-known/openid-configuration
jwks_uri
https
http
0.8.0
Where an outside issuer's signing keys are read from: an explicit JWKS URL, or OpenID Connect discovery (
<issuer>/.well-known/openid-configuration, whosejwks_uriis used). Both URLs must behttps, orhttpon a loopback host.