keratin / authn

Prototype version of AuthN service. See: keratin/authn-server
https://keratin.tech
GNU Lesser General Public License v3.0
34 stars 0 forks source link

Missed rotation intervals #40

Closed cainlevy closed 7 years ago

cainlevy commented 7 years ago

Solves for a number of possible inconsistencies with the JWKs endpoint:

  1. If an AuthN server restarts, it should still serve the current keys from its JWKs endpoint.
  2. If multiple AuthN processes are running, a key may be generated by one process but should still be returned from the JWKs endpoint by other processes.
  3. If an AuthN server is not consistently active, it may not generate keys during some interval. It should still remove expired keys from its JWKs endpoint.

This means performing Redis calls when fetching current keys. We still attempt memoization and trimming as appropriate to minimize traffic.