stormpath-sdk-java
stormpath-sdk-java copied to clipboard
AccessTokens should be validate it using the kid in the header instead of the client apiKey
Access tokens should resolve the apiKey based on the kid header and not just based on the current apiKeyId.