cockroachdb / cockroachdb/cockroach
jwtauthccl: Cache JWKS response as part of jwks_auto_fetch
Open
C-enhancement
P-3
T-product-security
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
**Is your feature request related to a problem? Please describe.**
When JWKS auto fetch is enabled, we call into the JWKS URL and fetch the keys each time, which is redundant.
**Describe the solution you'd like**
The JWKS response could be cached and reused, and could be fetched only when we encounter a new `kid`.
**Describe alternatives you've considered**
The alternative is the current behaviour, wherein we fetch JWKS each time.
**Additional context**
N/A
Jira issue: CRDB-40192
Epic CRDB-54682
Contributor guide
Assessment
This issue has not been assessed yet.