search

WLCG-AuthZ-WG / common-jwt-profile

A repo for the WLCG Common JWT profile document
3 stars 8 forks source link

Inconsistency in token issuer public key cache lifetimes #52

Closed DrDaveD closed 6 days ago

DrDaveD commented 7 months ago

17 modified a table to say the maximum token issuer public key cache lifetime is 4 days, but there is another section of text that is inconsistent with that. The Token Verification section says

The recommended lifetime of the public key cache is one day, but SHOULD be kept to less than 7 days.
maarten-litmaath commented 7 months ago

To be fixed indeed. I also think the example URLs in that section should not be clickable...