It would be hepful if there was a collection of sample web eID authentication tokens (unverifiedCertificate, algorithm , signature, …) that could be used for token verification testing.
The tokens should be using a known static nonce and origin, and be provided for each signature algorithm ("ES256", "ES384", "ES512", "PS256", "PS384", "PS512", "RS256", "RS384", "RS512").
There are some test tokens in web-eid-authtoken-validation-java, but these are a) not easily usable without reverse-engineering the java package and b) only seem to be provided for the ES384 algorithm.