From 4e8fb045e2b7908cc4d21253406490cae6902d4b Mon Sep 17 00:00:00 2001 From: "Julian K. Arni" Date: Thu, 14 Apr 2022 13:53:54 +0200 Subject: [PATCH] Review fix --- changelog.d/1580 | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/changelog.d/1580 b/changelog.d/1580 index a1adea64..d0587055 100644 --- a/changelog.d/1580 +++ b/changelog.d/1580 @@ -4,7 +4,9 @@ issues: #1579 description: { -Currently validationKeys are a fixed JWKSet. This does not work for setups such -as AWS Cognito or Okta, where there is a regular key rotation. This change -alters the type of validationKeys from JWKSet to IO JWKSet. +Currently validationKeys are a fixed JWKSet. This does not work with OIDC +providers such as AWS Cognito or Okta, which regularly fetching jwks_uri to +discover new and expired keys. + +This change alters the type of validationKeys from JWKSet to IO JWKSet. }