Repository navigation

auth: JWKS refresh cooldown, fetch timeout and shared backoff, operator-configured metadata resource, no-usable-keys 503 (see Consiliency/pmcp#231, Consiliency/pmcp#320) - #325

Merged

ViperJuice merged 2 commits into

mainfrom

fix/231-auth-hardening

Oct 1, 2026

Merged

auth: JWKS refresh cooldown, fetch timeout and shared backoff, operator-configured metadata resource, no-usable-keys 503 (see Consiliency/pmcp#231, Consiliency/pmcp#320)#325
ViperJuice merged 2 commits into
mainfrom
fix/231-auth-hardening

Commits on Oct 1, 2026
- auth: JWKS refresh cooldown, fetch timeout + shared failure backoff, operator-configured metadata resource, no-usable-keys 503
  
  ViperJuice
  and
  claude
  committed
  3c043d7
- auth: forged tokens are 401 not 500, every fetch failure opens the backoff, canonical metadata fallback
  
  ViperJuice
  and
  claude
  committed
  4083989