Possibility to reload RemoteJWKSet without blocking jwt verification

[umutuzgur]

Hi there,

We are trying to tackle an issue we have with lambda where the jwt verification takes more than 1s when the cache max age is reached. I was hoping to kickoff the reload cycle before the cache age is reached and do a hot swap so verify doesn't need to do a refresh. As a quick solution, could we also export RemoteJWKSet like LocalJWKSet so I can call the reload function asynchronously?

[panva]

Hi @umutuzgur.

I'm not going to export those classes, but please have a look if main...disc-672 would suffice, it allows introspecting the remote resolver's state and manually triggering reload.

These methods are typed, public API, but intentionally not documented since their use is rather niche.

[umutuzgur]

@panva That is even better. I didn't suggest that since I thought it would be more work for you but you implemented that very fast 👏 . Thanks for the quick response

[panva]

https://github.com/panva/jose/releases/tag/v5.3.0