The JWKS URL field at $OIDC_ISSUER/.well-known/openid-configuration is jwks_uri and not token_endpoint
$OIDC_ISSUER/.well-known/openid-configuration