@@ -4,7 +4,9 @@ issues: #1579
5description: {
5description: {
7−Currently validationKeys are a fixed JWKSet. This does not work for setups such
7+Currently validationKeys are a fixed JWKSet. This does not work with OIDC
8−as AWS Cognito or Okta, where there is a regular key rotation. This change
8+providers such as AWS Cognito or Okta, which regularly fetching jwks_uri to
9+discover new and expired keys.
9−alters the type of validationKeys from JWKSet to IO JWKSet.
11+This change alters the type of validationKeys from JWKSet to IO JWKSet.