KeyRingOptions Class
Configuration of the key ring.
public sealed class KeyRingOptionsInheritance System.Object → KeyRingOptions
Properties
KeyRingOptions.KeyRolloverPropagation Property
How long a newly minted key is published before the ring starts producing with it.
public System.TimeSpan KeyRolloverPropagation { get; set; }Property Value
Remarks
A consumer caches the published key set, so a key that starts signing the moment it appears will sign tokens that consumers with a warm cache cannot yet verify. Publishing first and producing later closes that window: by the time a key leads its algorithm, every consumer refreshing on the usual schedule has already seen it.
The value is therefore a property of how long consumers cache, not of how often keys rotate. An hour covers the caching most providers and clients default to.