You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
`pkc_jwkset_path`
1526
1526
: ([Static](docs-content://deploy-manage/stack-settings.md#static-cluster-setting)) The file name or URL to a JSON Web Key Set (JWKS) with the public key material that the JWT Realm uses for verifying token signatures. A value is considered a file name if it does not begin with `https`. The file name is resolved relative to the {{es}} configuration directory. If a URL is provided, then it must begin with `https://` (`http://` is not supported). {{es}} automatically caches the JWK set and will attempt to refresh the JWK set upon signature verification failure, as this might indicate that the JWT Provider has rotated the signing keys. Background JWKS reloading can also be configured with the setting `pkc_jwkset_reload.enabled`. This ensures that rotated keys are automatically discovered and used to verify JWT signatures.
1527
1527
1528
-
`pkc_jwkset_reload.enabled`
1528
+
`pkc_jwkset_reload.enabled` {applies_to}`stack: ga 9.3` 
1529
1529
: ([Static](docs-content://deploy-manage/stack-settings.md#static-cluster-setting)) Indicates whether JWKS background reloading is enabled. Defaults to `false`.
1530
1530
1531
-
`pkc_jwkset_reload.file_interval`
1531
+
`pkc_jwkset_reload.file_interval` {applies_to}`stack: ga 9.3` 
1532
1532
: ([Static](docs-content://deploy-manage/stack-settings.md#static-cluster-setting)) Specifies the reload interval for file-based JWKS. Defaults to `5m`.
1533
1533
1534
-
`pkc_jwkset_reload.url_interval_min`
1534
+
`pkc_jwkset_reload.url_interval_min` {applies_to}`stack: ga 9.3` 
1535
1535
: ([Static](docs-content://deploy-manage/stack-settings.md#static-cluster-setting)) Specifies the minimum reload interval for URL-based JWKS. The `Expires` and `Cache-Control` HTTP response headers inform the reload interval. This configuration setting is the lower bound of what is considered, and it is also the default interval in the absence of useful response headers. Defaults to `1h`.
1536
1536
1537
-
`pkc_jwkset_reload.url_interval_max`
1537
+
`pkc_jwkset_reload.url_interval_max` {applies_to}`stack: ga 9.3` 
1538
1538
: ([Static](docs-content://deploy-manage/stack-settings.md#static-cluster-setting)) Specifies the maximum reload interval for URL-based JWKS. This configuration setting is the upper bound of what is considered from header responses (`5d`).
1539
1539
1540
1540
`hmac_jwkset`
0 commit comments