Okta Certified Developer Practice Questions - Okta Certified Developer Exam

Retrieve Okta's public JSON Web Key Set (JWKS) from the authorization server's JWKS endpoint, then use the public key to verify the JWT signature locally Send the token to Okta's token introspection endpoint on every API request Decode the JWT payload with base64 without signature verification to read the claims Call the Okta Users API to verify the subject claim matches an active user