Add instructions for enabling JWKS caching

[tricki]

Checklist

• I agree to uphold the Code of Conduct.

Description

Our logs show the following error:

Unable to complete network request; cURL error 7: Failed to connect to *.eu.auth0.com port 443 after 2002 ms: Could not connect to server (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://*.eu.auth0.com/.well-known/jwks.json

After some searching, the solution is apparently to enable JWKS caching. But I'm unsure how to do that using the Laravel SDK. I see there is a Configuration::CONFIG_TOKEN_CACHE configuration, which I think is the correct setting, but I'm unsure as to what exactly I should configure (e.g. the expected interface).

My approach would probably be to have a longer-lasting cache, but refreshing it regularly, after it's used.

As an alternative, maybe being able to modify the timeout (2s), or number of retries might also solve this problem.

Note that we've only experienced this once, so it might just have been a one-time event. But I'd still like to prevent this from happening again, if possible.

Thanks!

[WillFoSho]

You've probably solved this by now, but it expects a PSR-6 compliant cache pool. Laravel does have this, you can get it with resolve('cache.psr6'). Auth0 instructions recommend adding it as a an env var, so the current class that resolves is the Psr16Adapter from Symfony. You need to make sure you escape the back slashes too AUTH0_TOKEN_CACHE="\\Symfony\\Component\\Cache\\Adapter\\Psr16Adapter". But it would be better to find a different way of providing it so you can just set it to what laravel has configured.

PS I haven't actually tested this, because I need to add it to the management sdk instead, but for some reason half the code in it is commented out and doesn't accept anything. Just always sets it to null. Hence why I'm here 🙃 The non-management cache setting at least looks like it accepts something.

PPS The docs say The following environment variables are supported, but should not be adjusted unless you know what you are doing: which may be why they don't have better instructions.