Authentication using JWKUrl

[arijit (Arijit Das)]

@minhaj

Some Identity Providers rotate the keys periodically, for this the GraphQL server will check the max-age or other similar directives in the Cache-Control Header or Expires headers in the response from the JWKURL when it fetches the Keys for the first time( When the Sever Starts or Schema Gets Updated) .

Since we are planning to support three providers Auth0, Firebase, and OneGraph. Can you describe what mechanism each of them provide to support key rotation and expiry?