hasura/graphql-engine
1
0
Fork 0
mirror of https://github.com/hasura/graphql-engine.git synced 2024-08-16 06:00:34 +03:00
Code Issues Projects Releases Wiki Activity

Revise JWK refresh documentation

Browse Source 
PR-URL: https://github.com/hasura/graphql-engine-mono/pull/10863
GitOrigin-RevId: 3de651232cd5d3b5a5e4c78e90afc2cad063fcbf
This commit is contained in:
Philip Lykke Carlsen 2024-06-12 14:17:40 +02:00 committed by hasura-bot
parent 5df3e6fac4
commit b4737fdd77
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/docs/auth/authentication/jwt.mdx
View File

@ -228,13 +228,13 @@ The following is the behavior in detail:
If it is unable to parse those values, then it will not refresh the JWKs (it assumes that if the above headers are
not present, the provider doesn't rotate their JWKs). If the parsed time is less than a second, the JWKs
will be fetched once per second regardless.
will be fetched once per minute regardless.
If `must-revalidate` and `max-age` are present, then it will refresh the JWK again after the time period specified
in `max-age` has passed.
However, if `max-age` is not specified or if `no-cache` or `no-store` are present, then it will refresh the JWKs
once a second.
once every minute.
##### JWK procedure while running
@ -245,7 +245,7 @@ The following is the behavior in detail:
as a timestamp.
2. If it is able to parse any of the above successfully, then it will use that parsed time to refetch the JWKs
again. If it is unable to parse any values, then it will sleep for 1 minute and then start another refresh cycle.
again. If it is unable to parse any values, then it will sleep for one minute and then start another refresh cycle.
##### JWK publisher URLs

2
server/src-lib/Hasura/Server/Auth/JWT.hs
View File

@ -371,7 +371,7 @@ fetchAndUpdateJWKs logger httpManager url jwkRef = do
Just expiryTime -> liftIO $ writeIORef jwkRef (jwkSet, Just expiryTime)
where
logNotice = do
let err = JwkRefreshLog LevelInfo (Just "Either the expiry is not present or cannot be parsed (retrying again after 1 second)") Nothing
let err = JwkRefreshLog LevelInfo (Just "Either the expiry is not present or cannot be parsed (retrying again after 60 seconds)") Nothing
liftIO $ unLogger logger err
-- | Given a JWK url, fetch JWK from it