Vincent Bonmalais
Vincent Bonmalais
I ran into the same issue and I think this should be fixed within the `openid_connect` package itself. Implementing an exponential backoff could be a strategy, but using a delay...
> WRT refetching the discovery documents, according to the spec everything should be refreshed when the TTL window for the resource expires. I'm not sure what expiry you are speaking...
Seems like it's all in the HTTP headers: https://github.com/DockYard/openid_connect/blob/5292a1b684b87b905bc22a7deda54347dd8a5472/lib/openid_connect.ex#L384-L396 But we are ignoring the remaining lifetime of the discovery document and use the remaining lifetime of the JWKS URI instead:...