...
A pair of statically configured assymmetric keys are used according to details returned by the Jwk endpoint. OIDC Clients must validate the signatures of ID Tokens and and validate responsen from Userinfo to ensure that they are not tampered with after being issued by the OIDC Provider from BankIDÂ
...