resp is HTTP/2.0 400 Bad Request
Content-Length: 84
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none';
Content-Type: application/json; charset=utf-8
Date: Tue, 24 Jan 2023 03:37:36 GMT
Pragma: no-cache
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Ratelimit-Limit: 100
X-Ratelimit-Remaining: 99
X-Ratelimit-Reset: 1674532238
X-Xss-Protection: 1; mode=block

{"error":"invalid_request","error_description":"Invalid client assertion signature"}

jwtVerify()