docs: added caching clarification to createRemoteJWKSet

panva · Jan 22, 2022 · 1039bcd · 1039bcd
1 parent 7cb8af4
commit 1039bcd
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/jwks/remote.ts b/src/jwks/remote.ts
@@ -226,6 +226,9 @@ interface URL {
  * remote endpoint returning a JSON Web Key Set, that is, for example,
  * an OAuth 2.0 or OIDC jwks_uri. Only a single public key must match
  * the selection process.
+ * The JSON Web Key Set is fetched when no key matches the selection
+ * process but only as frequently as the `cooldownDuration` option allows,
+ * to prevent abuse.
  *
  * @param url URL to fetch the JSON Web Key Set from.
  * @param options Options for the remote JSON Web Key Set.