spring-security
spring-security copied to clipboard
Published
20 hours ago •
spring-projects
spring-projects
carrier thread be suspended by synchronized in RemoteJWKSet
RemoteJWKSet use synchronized for synchronization. But this will suspend the carrier thread. In some specific situations, it may cause the server to hang:
single carrier thread.(Single core CPU). And call itself to retrieve jwk.
RemoteJWKSet is deprecated. Should we replace it with JwkSourceBuilder?
SpringBoot: 3.3.1 Java: Temurin-21.0.4+7
