Published January 27, 2026
| Version 1.0
Technical note
Open
WLCG standard system JWKS cache
Authors/Creators
- 1. Fermi National Accelerator Laboratory
- 2. Morgridge Institute for Research
-
3.
University of Nebraska–Lincoln
-
4.
National Institute for Subatomic Physics
-
5.
European Organization for Nuclear Research
- 6. Bentley Systems
Description
Goal: Provide a system-wide cache of JWKS information for issuers of interest that multiple token-parsing libraries can reuse. By having a cache in a trusted location on the system (and allowing the library to trust the system), we can reduce the impact of temporary outages of the JWKS endpoint, support clients that do not have direct access to the internet, reduce the load on the endpoint, and avoid rate-limiting conditions.
This document outlines the motivation behind the design choices and the design of the cache.
Files
WLCG_JWKS_Cache_1.0.pdf
Files
(33.7 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:18fb5d689448356e3d34b242fae2658e
|
33.7 kB | Preview Download |
Additional details
Software
- Repository URL
- https://github.com/WLCG-AuthZ-WG/jwks-cache
- Programming language
- Markdown
- Development Status
- Active