How to use the JWT jwt.PublicKeyXml to verify a token with https://jwt.io/#encoded-jwt

[mythz]

You can use the exact same APIs to verify a JWT or an Encrypted JWT (JWE) that I answered previously in:

Convenience method to manually "try authenticate" a JWT Bearer Token

There weren’t any official public APIs exposed but I’ve just added some new APIs you can use: var jwtProvider = (JwtAuthProvider)AuthenticateService.GetAuthProvider(JwtAuthProvider.Name); // get valid JsonObject you can inspect JsonObject validPayload = jwtProvider.GetValidJwtPayload(jwt); bool isValid = jwtProvider.IsJwtValid(jwt); These APIs are available from v5.0.3 that’s now available on MyGet. If you had v5.0.3 installed previously you’ll need to clear your NuGet cache with: $ nuget …

If it’s an encrypted JWE Token the JwtAuthProvider validates the token with the configured Private Key, note the Public Key is not enough as the payload needs to be decrypted with the Private Key.