GluuFederation / GluuFederation/oxAuth

JWKS : add key distribution support

Open
#1,470 2 comments 0 reactions 1 assignee Claimed by @yuriyz View on GitHub
enhancement
Dominant language
Java
Stars
425
Forks
145
PR merge metrics
No merged PRs in 30d

Description

## Describe the issue

```
Parameters:
key_rotation_interval = 2h
jwks_sync_time = 60*20 + 10 #20 minutes plus small epsilon to allow for jitter

1) Create initial keys with expiration = key_rotation_interval + token_lifetime
2) Wait for key_rotation_interval - jwks_sync_time
3) create kid2 with expiration = key_rotation_interval + token_lifetime + jwks_sync_time # the extra time is needed as the key is created early
4) publish new jwks which contains original kid1 and new kid2
5) wait jwks_sync_time
6) push private jks to pods so they can use them
7) when kid1 expires remove it from jwks
```

Support: 8847

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.