unstale

npm / jwks-rsa

jwks-rsa

What changed in jwks-rsa 2 to 4, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-26.

7 breaking5 new APIs and options1 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

jwks-rsa 43 changes

Breaking changes 1

  • The minimum supported Node.js runtime is now 20.19.0, which may require upgrading your runtime.

    4.0.0release notes

New APIs and options 2

  • Adds cacheMaxAgeFallback for graceful JWKS degradation during outages.

    4.1.0release notes

  • Adds onStaleCacheFallback for graceful JWKS degradation during outages.

    4.1.0release notes

jwks-rsa 32 changes

Breaking changes 1

Fixes and other changes 1

  • jwksUri is optional when a custom fetcher is provided.

    3.2.2release notes

jwks-rsa 28 changes

Breaking changes 5

  • Callbacks are no longer supported; getSigningKey uses async/await and promises.

    2.0.0release notes

  • The API changed to JwksClient.

    2.0.0release notes

  • Node versions below 10 are no longer supported.

    2.0.0release notes

  • The proxy option has been removed from JwksClient; users can configure a proxy through requestAgent or override the request library with fetcher.

    2.0.0release notes

  • Removed; configure the HTTP(S) Agent directly through requestAgent instead.

    2.0.0release notes

New APIs and options 3

  • Allows users to completely override how the request to the jwksUri endpoint is made.

    2.0.0release notes

  • Adds full JWK/JWS support.

    2.0.0release notes

  • Exposes an option to specify the HTTP(S) Agent used by jwksClient.

    2.0.0release notes