Therefore, you do not need access to the public key use to verify the access token. It happens for you within our SDK itself.