Are JWKS files cached locally?

[aesteve]

Hello and thank you for your work.

I've introduced smallrye-jwt into my application and faced an SSL issue when the first request hit the secured endpoint.

So I'm guessing fetching JWKS from a remote location is lazy. Fine.

Is this put in a cache though ? I'm really concerned about this, since it could really slow down the incoming traffic dramatically, or even fail if JWKS endpoint is down for a moment.

I tried to look here but I'm not 100% sure.

Could you please confirm and close this issue/question if you have a few minutes? That'd be really helpful.

Thank you.

[sberyozkin]

Hi @aesteve
The HttpsJwksVerificationKeyResolver uses HttpsJwks so yes the cache is used.
Thanks

[aesteve]

Perfect!
Thanks a lot.