JSON Web Key Set (JWKS)
A published set of public keys an OIDC provider rotates over time, letting any client verify a token's signature without a pre-shared secret.
aka: JWKS
JWKS is what makes signature verification scale to thousands of independent clients: instead of distributing a secret out of band, the provider publishes its current public keys at a well-known URL, and clients cache and refresh them as needed. Key rotation becomes an operational non-event instead of a coordinated migration.