cid 9613c74993b4ba5c818ec3a9b286477bdf785c33afb9141deb2d4455a40080cd · original · open access · via openalex
Title: WLCG standard system JWKS cache Authors: Dave Dykstra; Brian Bockelman; Derek Weitzel; M. Sallé; M. Litmaath; Aleksandr P. Konstantinov Venue: Zenodo (CERN European Organization for Nuclear Research) Year: 2026 Canonical: doi:10.5281/zenodo.18392300 URL: https://doi.org/10.5281/zenodo.18392300 Collector: openalex OA: true ABSTRACT Goal: Provide a system-wide cache of JWKS information for issuers of interest that multiple token-parsing libraries can reuse. By having a cache in a trusted location on the system (and allowing the library to trust the system), we can reduce the impact of temporary outages of the JWKS endpoint, support clients that do not have direct access to the internet, reduce the load on the endpoint, and avoid rate-limiting conditions. This document outlines the motivation behind the design choices and the design of the cache.