[BUG] - OIDC - Invalid JSON Web Key Set about mealie HOT 8 CLOSED

If you restart Mealie does it work again?

from mealie.

If you restart Mealie does it work again?

Just tried and yes it does work again, temporarily I guess

from mealie.

Mealie caches the jwks_uri, so if the keys rotate which maybe Zitadel does, then Mealie would still have the old keys and could be invalid. Restarting the container will clear the cache. I think currently the cache is indefinite, probably need to make it only last a few hours...

from mealie.

I see, the default in Zitadel is 12 hours and configurable
I'm not an expert with it, does this mean every 12 hours, I do not have to log in back but the token is refreshed to a new one ?

from mealie.

We exchange your id token for a Mealie token, so the id token lifetime doesn't matter too much. By default the Mealie token lifespan is 24hrs I think. That's configurable either by setting the token expiry env variable (don't know it off the top of my head) or you can set OIDC_REMEMBER_ME=true to have an extended session of like 2 weeks.

It's the key set that I was talking about is cached. The key set is what is used to verify the id token signature so we know it's legit

from mealie.

So I should give it a try to set OIDC_REMEMBER_ME to false ?

from mealie.

Set it to true and you won't be logged out after 24 hours

from mealie.

It's already set to True
I'm not logged out, it happens, I think, when I press "Disconnect" on mealie and then try to log in back

from mealie.