LoadJSONWebKey loads and validates the given JWK.

NewSigner accepts a serialized, private JWK and creates a new Signer instance.

NewVerifier accepts serialized, public JWKs and creates a new Verifier instance.

ErrDuplicateKeyID is returned when initializing a verifier with multiple keys with the same KeyID.

ErrKeyIDNotFound is returned when trying to verify a token when there are no corresponding key IDs matching the token header.

Signer supports operations on a private JWK.

Verifier supports operations on a public JWK.