Earlier, I got my service app working with pasting my public key manually in the UI. And `POST https://{{OKTA_DOMAIN_AUTH}}/oauth2/v1/token` gave me a bearer token.

While changing my flow to use a URL for my keys.

I pasted the URL in the admin UI

But `POST https://{{OKTA_DOMAIN_AUTH}}/oauth2/v1/token` now returns the error

{
"error": "invalid_client",
"error_description": "Error retrieving the client JWKSet from jwks_uri."
}

solution: make sure your headers return

content-type: application/json

that made the error go away.

Tip: set your cache-control to less than 3600 (aka 1 hour) if you’re experimenting. Written wile stuck waiting for an hour for caches to reset (-_-)