cockroachdb / cockroachdb/cockroach

jwtauthccl: Cache JWKS response as part of jwks_auto_fetch

Open
#126,931 0 comments 0 reactions 1 assignee Claimed by @sanchit-CRL View on GitHub
C-enhancement P-3 T-product-security
Dominant language
Go
Stars
32.5k
Forks
4.1k
PR merge metrics
PR metrics pending

Description

**Is your feature request related to a problem? Please describe.**
When JWKS auto fetch is enabled, we call into the JWKS URL and fetch the keys each time, which is redundant.

**Describe the solution you'd like**
The JWKS response could be cached and reused, and could be fetched only when we encounter a new `kid`.

**Describe alternatives you've considered**
The alternative is the current behaviour, wherein we fetch JWKS each time.

**Additional context**
N/A

Jira issue: CRDB-40192

Epic CRDB-54682

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.