Function refresh

apps/cloud/src/auth/jwks-cache.ts:286–312

()

    Date.now() - candidate.fetchedAt < staleMaxMs;

  const refresh = (): Promise<CacheEntry> => {
    if (inflight) return inflight;
    const startedAt = Date.now();
    fetchCount += 1;
    inflight = (async () => {
      const jwks = await fetchJwksOnce(url, fetchImpl(), timeoutMs);
      const next = entryFrom({ jwks, fetchedAt: Date.now() });
      entry = next;
      if (store) {
        await ignoreFailure(store.put(url, { jwks: next.jwks, fetchedAt: next.fetchedAt }));
      }
      return next;
    })()
      .then(
        (next) => next,
        (error: unknown) => {
          fetchFailureCount += 1;
          // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: counting a fetch failure must preserve the original rejection for jose
          throw error;
        },
      )
      .finally(() => {
        lastFetchDurationMs = Date.now() - startedAt;
        inflight = null;
      });
    return inflight;
  };

  /** Fire-and-forget revalidation behind a stale hit. */
  const refreshInBackground = (): void => {