Files
zeekayandHanzo Dev 9e3f065241 Trust a signer's keys for minutes, not a second
One issuer serves every login, so a one-second cache refetched its key set
on nearly every login and a rate limit at the issuer became a login outage.
Keys are now trusted for five minutes; a token under an unknown key id may
force an early fetch, at most every ten seconds, which is how a newly
published key is picked up.

A fetch also added to the cached set and never removed from it, so a key
the issuer withdrew went on verifying until the controller restarted. The
fetched set now replaces it; a failed fetch keeps the last good one.

Co-authored-by: Hanzo Dev <[email protected]>
2026-09-23 01:05:03 -07:00
..
2026-01-28 15:01:35 -05:00
2026-02-18 18:34:19 -08:00
2026-01-28 15:01:35 -05:00
2022-06-30 17:45:08 -04:00
2022-06-30 17:45:08 -04:00