I'm trying to protect the application's REST API hosted in my Wildfly 11 container with BEARER_TOKEN that is issued by Azure Active Directory.
What I've done already:
- Migrated from Legacy security to Elytron security.
- Created a token realm
- Registered an application at AAD.
I can't find a way to configure AAD's public keys URL. Is there a configuration I can set to point to the public keys at https://login.microsoftonline.com/common/discovery/keys ? How the Application Server suppose to validate the tokens that AAD issues?