Loading...

XML

Word

Printable

JSON

Type: Task
Resolution: Fixed
Priority: Major - P3
Fix Version/s: 8.1.0-rc0, 8.0.16
Affects Version/s: None
Component/s: None
Labels:
None

Assigned Teams:

Server Security
Backwards Compatibility:
Minor Change
Backport Requested:

v8.0, v7.0
Sprint:
Security 2024-05-13, Security 2024-05-27
CAR Domain/s:
None

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name(s):
None
Goal Link:
None

JWKManager::getValidator may acquire a fresh JWKS when presented with an unknown kid. We should rate limit this behavior.

is related to

SERVER-101491 Quiesce in JWKFetcherImpl when remote returns 5xx error

Closed

related to

SERVER-91045 Load JWKs immediately at startup regardless of JWKSMinimumQuiescePeriodSecs

Closed

Assignee:: Sara Golemon (Inactive)
Reporter:: Spencer Jackson
Participants:: Githook User, Sara Golemon, Spencer Jackson
Votes:: 0 Vote for this issue
Watchers:: 5 Start watching this issue

Created:: Apr 25 2024 09:16:25 PM UTC
Updated:: Oct 16 2025 06:50:41 PM UTC
Resolved:: May 21 2024 04:20:56 PM UTC