GluuFederation / GluuFederation/oxAuth
JWKS : add key distribution support
- Dominant language
- Java
- Stars
- 425
- Forks
- 145
- PR merge metrics
- No merged PRs in 30d
Description
## Describe the issue
```
Parameters:
key_rotation_interval = 2h
jwks_sync_time = 60*20 + 10 #20 minutes plus small epsilon to allow for jitter
1) Create initial keys with expiration = key_rotation_interval + token_lifetime
2) Wait for key_rotation_interval - jwks_sync_time
3) create kid2 with expiration = key_rotation_interval + token_lifetime + jwks_sync_time # the extra time is needed as the key is created early
4) publish new jwks which contains original kid1 and new kid2
5) wait jwks_sync_time
6) push private jks to pods so they can use them
7) when kid1 expires remove it from jwks
```
Support: 8847
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.