Verify a signature

Signature-Input

The Signature-Input header value.

Signature

The Signature header value.

Signature-Agent (optional)

The Signature-Agent header, if present.

Host / authority (optional)

The request authority, needed to reconstruct @authority (e.g. example.com).

Directory (JSON or https URL, optional)

Paste the JWKS directory JSON, or an https URL to fetch it, so the signing key can be resolved. If blank, the Signature-Agent URL is used.