---
title: CachingJwkSetService
description: Configure CachingJwkSetService in PingGateway to cache a JWK set from a URI, with configurable timeout and cache size
component: pinggateway
version: 2026
page_id: pinggateway:reference:CachingJwkSetService
canonical_url: https://docs.pingidentity.com/pinggateway/2026/reference/CachingJwkSetService.html
revdate: 2025-06-02T18:01:47Z
section_ids:
  usage: Usage
  properties: Properties
  more_information: More information
---

# CachingJwkSetService

Service for caching a JWK set from a URI.

## Usage

```none
{
  "name": string,
  "type": "CachingJwkSetService",
  "config": {
    "endpointHandler": Handler reference,
    "cacheTimeout": configuration expression<duration>,
    "cacheMissTimeout": configuration expression<duration>,
    "cacheMaxSize": configuration expression<number>
  }
}
```

## Properties

* `"endpointHandler"`: *IdmService [reference](preface.html#definition-reference), optional*

  The [Handler](Handlers.html) to use to get the JWK set.

  Default: The default [ForgeRockClientHandler](ForgeRockClientHandler.html)

* `"cacheTimeout"`: *[duration](preface.html#definition-duration), optional*

  Reload the cache after this duration.

  Default: 2 minutes

* `"cacheMissTimeout"`: *[duration](preface.html#definition-duration), optional*

  Reload the cache after this duration when a JWK isn't found in the cache.

  Default: 2 minutes

* `"cacheMaxSize"`: *[number](preface.html#definition-number), optional*

  The maximum number of JWKs in the cache.

  Default: 500

## More information

[org.forgerock.openig.fapi.jwks.CachingJwkSetService](../_attachments/apidocs/org/forgerock/openig/fapi/jwks/CachingJwkSetService.html)