Add periodic PKC JWK set reloading capability to JWT realm.

Author: ebarlas

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authc/jwt/JwtRealmSettings.java

@@ -249,6 +249,30 @@ private static Set<Setting.AffixSetting<SecureString>> getSecureSettings() {
         Setting.Property.NodeScope
     );
 
+    public static final Setting.AffixSetting<Boolean> PKC_JWKSET_RELOAD_ENABLED = Setting.affixKeySetting(
+        RealmSettings.realmSettingPrefix(TYPE),
+        "pkc_jwkset_reload_enabled",
+        key -> Setting.boolSetting(key, false, Setting.Property.NodeScope)
+    );
+
+    public static final Setting.AffixSetting<TimeValue> PKC_JWKSET_RELOAD_FILE_INTERVAL = Setting.affixKeySetting(
+        RealmSettings.realmSettingPrefix(TYPE),
+        "pkc_jwkset_reload_file_interval",
+        key -> Setting.timeSetting(key, TimeValue.timeValueMinutes(5), TimeValue.timeValueMinutes(5), Setting.Property.NodeScope)
+    );
+
+    public static final Setting.AffixSetting<TimeValue> PKC_JWKSET_RELOAD_URL_INTERVAL_MIN = Setting.affixKeySetting(
+        RealmSettings.realmSettingPrefix(TYPE),
+        "pkc_jwkset_reload_url_interval_min",
+        key -> Setting.timeSetting(key, TimeValue.timeValueMinutes(5), TimeValue.timeValueMinutes(5), Setting.Property.NodeScope)
+    );
+
+    public static final Setting.AffixSetting<TimeValue> PKC_JWKSET_RELOAD_URL_INTERVAL_MAX = Setting.affixKeySetting(
+        RealmSettings.realmSettingPrefix(TYPE),
+        "pkc_jwkset_reload_url_interval_max",
+        key -> Setting.timeSetting(key, TimeValue.timeValueDays(5), TimeValue.timeValueMinutes(5), Setting.Property.NodeScope)
+    );
+
     public static final Setting.AffixSetting<SecureString> HMAC_JWKSET = RealmSettings.secureString(TYPE, "hmac_jwkset");
     public static final Setting.AffixSetting<SecureString> HMAC_KEY = RealmSettings.secureString(TYPE, "hmac_key");
 

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/InternalRealms.java

@@ -171,7 +171,7 @@ public static Map<String, Realm.Factory> getFactories(
             config -> new OpenIdConnectRealm(config, sslService, userRoleMapper, resourceWatcherService),
             // JWT realm
             JwtRealmSettings.TYPE,
-            config -> new JwtRealm(config, sslService, userRoleMapper)
+            config -> new JwtRealm(config, sslService, userRoleMapper, threadPool)
         );
     }