R54: refresh JWKS on unknown-kid to pick up key rotation

2026-10-15 04:18:03 +00:00 · 2026-08-13 15:30:58 +01:00
parent 08f474b551
commit 4c5991f8e6
3 changed files with 195 additions and 3 deletions
@@ -107,7 +107,7 @@ func (cm *CacheManager) GetSharedMetadataCache() *MetadataCache {
 func (cm *CacheManager) GetSharedJWKCache() JWKCacheInterface {
 	cm.mu.RLock()
 	defer cm.mu.RUnlock()
-	return &JWKCache{cache: cm.manager.GetJWKCache()}
+	return &JWKCache{cache: cm.manager.GetJWKCache(), lastForceRefresh: make(map[string]time.Time)}
 }

 // GetSharedIntrospectionCache returns the shared token introspection cache