title: JWT Keys - Asymmetric and Symmetric
body: <p>I understand the difference between symmetric and asymmetric keys. I understand that the keys are used to calculate the signature and then verify them. However diving a little deeper, I'd like to understand a bit more which I'm having trouble finding online. </p>
  
  <p>Are the keys given to the consumers to verify the contents? Wouldn't that give consumers the ability to change the JWT contents if symmetric keys are used? </p>
  
  <p>When asymmetric keys are used is the signature calculated with the private or public key? Is the consumer given the public/private key?</p>