From 4cc714d654521e10b758f9a255ba4c2ed33c2bc5 Mon Sep 17 00:00:00 2001
From: "Julian K. Arni" <jkarni@gmail.com>
Date: Thu, 14 Apr 2022 11:28:39 +0200
Subject: [PATCH] Changelog entry

---
 changelog.d/1580 | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 changelog.d/1580

diff --git a/changelog.d/1580 b/changelog.d/1580
new file mode 100644
index 00000000..a1adea64
--- /dev/null
+++ b/changelog.d/1580
@@ -0,0 +1,10 @@
+synopsis: Allow IO in validationKeys
+prs: #1580
+issues: #1579
+
+description: {
+
+Currently validationKeys are a fixed JWKSet. This does not work for setups such
+as AWS Cognito or Okta, where there is a regular key rotation. This change
+alters the type of validationKeys from JWKSet to IO JWKSet.
+}