🔍 EduSSO v1 Validator

Black-box conformance checks for a tutor / relying party. See edu-sso specs.

The full SSO flow check mints a real JWT signed by https://test-issuer.openlearnprotocol.org and sends it to your tutor. For this to pass, configure your tutor to trust this issuer in staging — e.g.

EDU_SSO_ISSUER=https://test-issuer.openlearnprotocol.org
EDU_SSO_AUDIENCE=<your tutor host>

JWKS lives at https://test-issuer.openlearnprotocol.org/.well-known/jwks.json.

Tutor URLIssuer URL (fixed — the validator only mints tokens from its own test issuer)