upcache
upcache copied to clipboard
support rsa key rotation
The public key handshake protocol allow changing the rsa key as long as jwt peremption is less than the time between two renewals (to avoid having to deal with more than two valid keys).
Thus the length of the rsa key would be imposed by the duration of jwt validity.
https://tools.ietf.org/html/rfc7517 /.well-known/jwks.json