OIDC auth methods client_secret_jwt, private_key_jwt

[Arto Tuomi]

> I like to try using the two jwt auth methods: client_secret_jwt and
> private_key_jwt.  These need the sp's public key stored somewhere.
> I can specify a list of supported methods in
> "token_endpoint_auth_methods_supported", but how do I specify the public key
> for an SP?

Use  "jwks_uri": "https://host/protected/redirect_uri?jwks=rsa" with the url your RP uses to publish its keys.

If you happen to be using mod_auth_oidc as your RP, create the keys and publish them with: 
OIDCPrivateKeyFiles kid1#/opt/jwk/cert.key
OIDCPublicKeyFiles kid1#/opt/jwk/cert.crt

Arto