Input to KeyStore.sign(). The KeyStore self-injects alg and kid into the protected header; callers may only set typ. This keeps adapter contracts stable under alg / kid rotation and remote-sign (KMS/HSM) backends.
KeyStore.sign()
alg
kid
typ
Optional
Input to
KeyStore.sign(). The KeyStore self-injectsalgandkidinto the protected header; callers may only settyp. This keeps adapter contracts stable under alg / kid rotation and remote-sign (KMS/HSM) backends.