title: JWT token SSO flow
body: <p>I have a simple question about SSO flow with JWT</p>
  
  <p>Let's say we have separate Authorization Server, which provides the JWT to the client app/server and Resource server, where client trying to access with that token.</p>
  
  <p><a href="https://i.stack.imgur.com/AERdR.png" rel="noreferrer"><img src="https://i.stack.imgur.com/AERdR.png" alt="enter image description here"></a></p>
  
  <p>The question is, should Resource server validate token by itself (e.g. share private certificate with Auth Server) or should it request Auth Server to validate JWT for each client request?</p>