WLCG standard system JWKS cache
Abstract
Goal: Provide a system-wide cache of JWKS information for issuers of interest that multiple token-parsing libraries can reuse. By having a cache in a trusted location on the system (and allowing the library to trust the system), we can reduce the impact of temporary outages of the JWKS endpoint, support clients that do not have direct access to the internet, reduce the load on the endpoint, and avoid rate-limiting conditions. This document outlines the motivation behind the design choices and the design of the cache.
Fields of Study & Subjects
Advanced Authentication Protocols Security
Access Control and Trust
Software System Performance and Reliability
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 27 January 2026