Snippet for JWT verification

JWT_verification.txt

//excpetion hanlding omitted for brevity

RsaJsonWebKey rsaJsonWebKey = getCachedRSAKey(); //should be the same as the one used to build the JWT previously

JwtConsumer jwtConsumer = new JwtConsumerBuilder()
                         .setRequireSubject() // the JWT must have a subject claim
                          .setVerificationKey(rsaJsonWebKey.getKey()) // verify the signature with the public key
                          .build(); // create the JwtConsumer instance

JwtClaims jwtClaims = jwtConsumer.processToClaims(jwt);