See 
https://github.com/apereo/cas/commit/0b123c7940ffd2f4ad066dcc0920d8695d9d5745

On Wednesday, October 15, 2025 at 6:31:47 AM UTC-7 [email protected] wrote:

> Hi,
>
> I'm trying to set up jwks file key rotation on my CAS server, but I'm not 
> able to.
>
> The default value for this property is:
>
> # Type: java.lang.Boolean
> # Module: cas-server-core-util
> # Owner: 
> org.apereo.cas.configuration.model.support.quartz.SchedulingProperties
> #
> # Whether scheduler should be enabled to schedule the job to run.
> #
> # cas.authn.oidc.jwks.rotation.schedule.enabled: true
>
> Then I set the variable in my .yml: 
>
> cas.authn.oidc.jwks.rotation.schedule.cron-expression: 0/2 0 * * ?
>
> But it never runs.
>
> Instead, revocation works well: 
>
> cas.authn.oidc.jwks.revocation.schedule.cron-expression: 0 55 12 * * *
>
> In the source code:
>
> - 
> https://github.com/apereo/cas/blob/master/support/cas-server-support-oidc/src/main/java/org/apereo/cas/config/OidcJwksConfiguration.java
>
> I can see a difference in the definition of the two schedulers:
>
> Rotation:
>
> .when(BeanCondition.on("*cas.authn.oidc.jwks.rotation.schedule*
> ").isTrue().given(applicationContext.getEnvironment()))
>
> Revocation:
>
> .when(BeanCondition.on("*cas.authn.oidc.jwks.revocation.schedule.enabled*
> ").isTrue().given(applicationContext.getEnvironment()))
>
> In the definition of rotation, should it be like this for it to work well?
>
> .when(BeanCondition.on("*cas.authn.oidc.jwks.rotation.schedule.enabled*").isTrue().given(applicationContext.getEnvironment()))
>  
>
>
> Best regards!
>
> - Xavier -
>

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9e22e832-81bf-4531-a388-fa10a3f9e6e5n%40apereo.org.

Reply via email to