Loading...

XML

Word

Printable

JSON

Type: Task
Resolution: Fixed
Priority: Major - P3
Fix Version/s: 8.1.0-rc0
Affects Version/s: None
Component/s: None
Labels:
None

Assigned Teams:

Server Security
Backwards Compatibility:
Minor Change
Backport Requested:

v8.0
Sprint:
Security 2024-05-13, Security 2024-05-27
Confidence Status:
None
Work Order:
3

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name:
None
Goal Link:
None

JWKManager::getValidator may acquire a fresh JWKS when presented with an unknown kid. We should rate limit this behavior.

is related to

SERVER-101491 Quiesce in JWKFetcherImpl when remote returns 5xx error

Closed

related to

SERVER-91045 Load JWKs immediately at startup regardless of JWKSMinimumQuiescePeriodSecs

Closed

Assignee:: Sara Golemon (Inactive)
Reporter:: Spencer Jackson
Participants:: Githook User, Sara Golemon, Spencer Jackson
Votes:: 0 Vote for this issue
Watchers:: 4 Start watching this issue

Created:: Apr 25 2024 09:16:25 PM UTC
Updated:: Apr 17 2025 03:40:40 PM UTC
Resolved:: May 21 2024 04:20:56 PM UTC
Confidence Status Last Update:: 29/Apr/24 10:50 PM