There are 2 comments.
 
 
OpenId Connect / cid:jira-generated-image-avatar-a6084a3d-a30b-4406-ba44-7d8e76c14694 OIDC-317 Open

Cache the JWKSet used to verify signatures
 
View issue   ยท   Add comment
 

2 comments

 
cid:jira-generated-image-avatar-be8ea5c1-f67e-48cb-bcbd-e2bca8bdd8ee Amlan Mishra on 07/Sep/26 21:11
 

Hi Thomas Mortagne, is this improvement open for contribution? I would love to work on it.

I plan to cache the JWKSet with a configurable TTL and refresh it periodically to handle key rotations. Please let me know if I can go ahead.
 
cid:jira-generated-image-avatar-be8ea5c1-f67e-48cb-bcbd-e2bca8bdd8ee Amlan Mishra on 07/Sep/26 21:12
 
Hi [~tmortagne], is this improvement open for contribution? I would love to work on it.

I plan to noticed OIDC-318 is linked and seems like a natural prerequisite, since a refreshable ClientProvider cache would be the right place to also hang the JWKSet with a configurable TTL and refresh . Would it periodically make sense to handle key rotations. tackle both together, starting with 318 then plugging the JWKSet caching into it? Please let me know if I can go ahead.
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.