You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello.
OidcIdTokenDecoderFactory caches JwtDecoders and ignores ClientRegistration updates.
It's required to provide uncached way to build JwtDecoder based on actual ClientRegistration.
For example we have a custom ClientRegistrationRepository that uses db to store ClientRegistrations.
It is expected that the settings can be changed dynamically. But OidcIdTokenDecoderFactory caches first created JwtDecoder by registrationId. And if we need to change value of jwsAlgorithm either jwksUri, we can't do it without the restarting of our application.
For now it can be asf crutch
OidcIdTokenDecoderFactory must provide a way to prevent caching of JwtDecoders.
For now, this can only be achieved with a dirty crutch below (via creation of new OidcIdTokenDecoderFactory everytime we need to access JwtDecoder).
Hello.
OidcIdTokenDecoderFactory caches JwtDecoders and ignores ClientRegistration updates.
It's required to provide uncached way to build JwtDecoder based on actual ClientRegistration.
For example we have a custom ClientRegistrationRepository that uses db to store ClientRegistrations.
It is expected that the settings can be changed dynamically. But OidcIdTokenDecoderFactory caches first created JwtDecoder by registrationId. And if we need to change value of jwsAlgorithm either jwksUri, we can't do it without the restarting of our application.
For now it can be asf crutch
OidcIdTokenDecoderFactory must provide a way to prevent caching of JwtDecoders.
For now, this can only be achieved with a dirty crutch below (via creation of new OidcIdTokenDecoderFactory everytime we need to access JwtDecoder).
I prepared PR that fixes it. #16647
If you have a better idea, you are welcome.
The text was updated successfully, but these errors were encountered: