Validate the JSON Web Token

Once the system has returned the transient JWT, you should validate the token's authenticity. This is done by retrieving the public key signature that is part of the transitent JWT, and comparing that signature with the public key returned from

Cybersource

.

To validate the key:

Retrieve the public key ID (kid) from the transient JWT header.
Retrieve the public key from
Cybersource
.
Validate the public key signature.