Given an issuer URL to an OpenId Configuration Provider (e.g., https://openid.example.org/openid/), derive the URLs for the token, auth and user-info endpoints by fetching the provider's configuration from the configuration endpoint (e.g., https://openid.example.org/openid/.well-known/openid_configuration). The client may also validate a provider's tokens by fetching the signing keys from the jwks_keys endpoint present in the configuration.