How to JWT (with Keycloak). Prosody JWT verification code

I’m trying to connect Jitsi with Keycloak tokens, the problem is that Keycloak tokens are signed using either with a certificate or a [client id + client secret].

Using the JWT Debugger in jwt.io I can see that prosody accepts tokens signed with a secret only.

What’s the best solution here?

Modifying prosody to accept a certificate or a [client id + client secret] signed token?