I’m writing an API that is authenticated with an Auth0 access token. That’s pretty simple and is working fine - including automatically fetching the JKS from the .well-known URL to ensure the token is correct. What I’m not sure about is validity. The cache control headers say something like 15 seco…

Hi @sazzer , Auth0 recommends caching the JWKS result and avoid hitting the JWKS endpoint unnecessarily. It will help improve your application performance and avoid you hitting Auth0 rate limits. You will want to make sure that if decoding a token fails, invalidate the cache and retrieve new signin…

JKS Validity period

Get Help

Topic		Replies	Views
JWKS Caching Strategy Recommendations Get Help oauth-2-0 , protocols	6	168	April 10, 2025
Is the endpoint to get the JWK for token validation rate limited? Get Help api , jwks , jwt-validation , key , rsa	2	3530	September 28, 2022
Feedback on Caching JWKS for JWT Verification in Ruby Get Help apis , application	2	208	July 15, 2024
Auth0 Failures getting .well-known/jwks.json Get Help jwks	10	18145	February 15, 2019
X509 Certificate validity in JWK JWT.io	6	4752	April 3, 2020

JKS Validity period

Related topics