Typesense could be configured with a JWKS endpoint where to retreive the public keys in order to validate JWT signatures