oidcauthlib 3.0.8__tar.gz → 3.0.9__tar.gz

{oidcauthlib-3.0.8/oidcauthlib.egg-info → oidcauthlib-3.0.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: oidcauthlib
-Version: 3.0.8
+Version: 3.0.9
 Summary: oidcauthlib
 Author-email: Imran Qureshi <imran.qureshi@bwell.com>
 License: Apache-2.0

oidcauthlib-3.0.9/VERSION

@@ -0,0 +1 @@
+3.0.9

{oidcauthlib-3.0.8 → oidcauthlib-3.0.9}/oidcauthlib/auth/well_known_configuration/well_known_configuration_cache.py

@@ -247,6 +247,7 @@ class WellKnownConfigurationCache:
                             await self.well_known_store.put(
                                 key=well_known_uri,
                                 value=well_known_configuration_cache_result.model_dump(),
+                                ttl=self.environment_variables.well_known_cache_ttl_seconds,
                             )
                             logger.info(f"Cached OIDC discovery document for {well_known_uri}")
                         return well_known_configuration_cache_result

{oidcauthlib-3.0.8 → oidcauthlib-3.0.9}/oidcauthlib/utilities/environment/oidc_environment_variables.py

@@ -196,6 +196,26 @@ class OidcEnvironmentVariables(AbstractEnvironmentVariables):
         except ValueError:
             raise ValueError("MAX_MONGO_INLINE_SIZE_KB must be a positive integer representing bytes")
 
+    @property
+    def well_known_cache_ttl_seconds(self) -> int:
+        """TTL in seconds for well-known configuration entries in the persistent store.
+
+        Controls how long OIDC discovery documents (including JWKS keys) are
+        cached in MongoDB before expiring. This ensures key rotations by
+        identity providers are picked up within a bounded window.
+
+        Set via WELL_KNOWN_CACHE_TTL_SECONDS environment variable.
+        Defaults to 3600 seconds (1 hour).
+
+        Returns:
+            TTL in seconds
+        """
+        try:
+            ttl = int(os.environ.get("WELL_KNOWN_CACHE_TTL_SECONDS", "3600"))
+            return ttl
+        except ValueError:
+            raise ValueError("WELL_KNOWN_CACHE_TTL_SECONDS must be a positive integer representing seconds")
+
     @property
     def well_known_config_http_timeout_seconds(self) -> int:
         """HTTP timeout in seconds for fetching well-known configurations.

{oidcauthlib-3.0.8 → oidcauthlib-3.0.9/oidcauthlib.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: oidcauthlib
-Version: 3.0.8
+Version: 3.0.9
 Summary: oidcauthlib
 Author-email: Imran Qureshi <imran.qureshi@bwell.com>
 License: Apache-2.0

oidcauthlib-3.0.8/VERSION

@@ -1 +0,0 @@
-3.0.8