Anyone know if HttpsJwks usage is thread safe? We got about 60 - 100 calls per second in an application where we are going to use HttpsJwks, but I don't see any locking when it comes to refreshing Jwks.
Also, HttpsJwksVerificationKeyResolver directly call's refresh if it fails to find a key.
Kind regards, Kenneth
It should be, yes. There's no locking but the only shared data is the cache object and it is set with a single assignment. It's used often in multithreaded situations.