search

spring-projects / spring-authorization-server

Spring Authorization Server
https://spring.io/projects/spring-authorization-server
Apache License 2.0
4.84k stars 1.27k forks source link

Enable refresh of JwkSet in X509SelfSignedCertificateVerifier #1599

Closed jgrandja closed 5 months ago

jgrandja commented 5 months ago

We should refresh the JwkSet (every 5 minutes) in X509SelfSignedCertificateVerifier for cases where the certificate is rotated on the client side.

Related gh-1559