-
Type: Bug
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Fully Compatible
-
ALL
-
Security 2024-06-10
-
200
Currently, the server sometimes waits for JWKSMinimumQuiescePeriodSecs before performing the initial load of JWKeys. This causes some tests to fail since they rely on keys being available immediately.
JWKSMinimumQuiescePeriodSecs is intended to rate-limit runtime key refreshes, particularly just-in-time ones during authentication. Therefore, there is no need to cause the initial load to get delayed by the quiesce period.
- is depended on by
-
COMPASS-7966 Enable OIDC tests on 8.0.x when server fix is backported
- Closed
- is related to
-
SERVER-89870 Rate limit JWKManager::getValidator
- Closed