Auth: Respect cache control for JWKS in auth.jwt (#68872)

* respect cache control for auth.jwt * add documentation * add small note on cache control header ignores * make distinction of env
2023-05-23 12:29:10 +02:00
parent 86ea0c2bc9
commit 5e5c751ecd
4 changed files with 124 additions and 8 deletions
@@ -135,6 +135,8 @@ jwk_set_url = https://your-auth-provider.example.com/.well-known/jwks.json
 cache_ttl = 60m
 ```

+> **Note**: If the JWKS endpoint includes cache control headers and the value is less than the configured `cache_ttl`, then the cache control header value is used instead. If the cache_ttl is not set, no caching is performed. `no-store` and `no-cache` cache control headers are ignored.
+
 ### Verify token using a JSON Web Key Set loaded from JSON file

 Key set in the same format as in JWKS endpoint but located on disk.