code: function (jws, pubKey, alg) {
      /*
        convert various public key format to RSAKey object
        see @KEYUTIL.getKey for a full list of supported input format
       */
      var rsaKey = KEYUTIL.getKey(pubKey);
  
      return KJUR.jws.JWS.verify(jws, rsaKey, [alg]);
    }
docs: Verifies the JWS string using the JWK
  @param {string} jws      The JWS string
  @param {object} pubKey   The public key that will be used to verify the signature
  @param {string} alg      The algorithm string. Expecting 'RS256', 'RS384', or 'RS512'
  @returns {boolean}       Validity of the JWS signature
  @throws {OidcException}