9Ağu
Validating iss and aud for internally signed JWT
I have an identity service that issues JWTs that are signed with private key.
I have several resource services that consume that token to determine the claims of the user and thereby to determine the authorization scope. Naturally, the r…