allow users to reduce or configure oidc jwk checks #1309

New Issue

2026-03-22T17:18:17-05:00

GiteaMirror commented

2026-03-22 17:18:17 -05:00

Originally created by @eleith on GitHub (Aug 1, 2025).

starting at https://github.com/moghtech/komodo/commit/3f767ed42e328be6887ee0b8b330669d6810dc44, Komodo refreshes it's oidc JWK every 60 seconds, leading to at minimum 1440 request per day (double in many cases due to first fetching of .well-known before fetching the jwk endpoint).

are there other options that could be explored to tune down the number of requests per day?

some ideas:

hardcode a high refresh cycle time
allow the user to configure the cycle time with an environmental variable
refresh the key only when needed, rather than on a cycle

i haven't yet dug into this, so i don't know if (3) is viable. (2) would help users who don't need this level of freshness tune the requests down while a default value would leave the service unchanged for others.

this issue branched from a related discussion in: #660

Originally created by @eleith on GitHub (Aug 1, 2025). starting at https://github.com/moghtech/komodo/commit/3f767ed42e328be6887ee0b8b330669d6810dc44, Komodo refreshes it's oidc JWK every 60 seconds, leading to at minimum 1440 request per day (double in many cases due to first fetching of `.well-known` before fetching the `jwk` endpoint). are there other options that could be explored to tune down the number of requests per day? some ideas: 1. hardcode a high refresh cycle time 2. allow the user to configure the cycle time with an environmental variable 3. refresh the key only when needed, rather than on a cycle i haven't yet dug into this, so i don't know if (3) is viable. (2) would help users who don't need this level of freshness tune the requests down while a default value would leave the service unchanged for others. this issue branched from a related discussion in: #660

GiteaMirror added the enhancement label 2026-03-22 17:18:17 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/komodo#1309