File tree Expand file tree Collapse file tree 1 file changed +13
-0
lines changed Expand file tree Collapse file tree 1 file changed +13
-0
lines changed Original file line number Diff line number Diff line change @@ -113,3 +113,16 @@ ory patch oauth2-config --project <project-id> --workspace <workspace-id> \
113113```
114114
115115For more information on how to create a custom keyset, see the [ ory create jwk] ( ../cli/ory-create-jwk.md ) command.
116+
117+ ## Caching of JWKs
118+
119+ The Ory Hydra Enterprise License (OEL) supports in-memory caching of JWKs to improve performance and reduce latency. It is
120+ configurable via the following options:
121+
122+ - ` db.jwk_cache.enabled ` governs whether the cache is enabled or not
123+ - ` db.jwk_cache.size ` is the maximum number of keys to be cached
124+ - ` db.jwk_cache.ttl ` is the time-to-live for cached keys
125+
126+ It's recommended to set a cache TTL to force regular refreshes of the keys. Updates to keys aren't propagated to the cache, so
127+ it's possible for tokens to be signed with rotated keys for the cache TTL duration. Clients are expected to accept old keys for a
128+ certain period of time.
You can’t perform that action at this time.
0 commit comments