# What changed in jwks-rsa

> 13 changes in jwks-rsa 2 to 4 from its official release notes, upgrade guides and advisories: 7 breaking, 5 new APIs and options. Each one cited. Sources checked 2026-10-26. HTML: https://unstale.sh/npm/jwks-rsa/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## jwks-rsa 4

### Breaking changes

- The minimum supported Node.js runtime is now 20.19.0, which may require upgrading your runtime. (4.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v4.0.0)

### New APIs and options

- Adds cacheMaxAgeFallback for graceful JWKS degradation during outages. (4.1.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v4.1.0)
- Adds onStaleCacheFallback for graceful JWKS degradation during outages. (4.1.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v4.1.0)

## jwks-rsa 3

### Breaking changes

- Support for Node 10 and 12 was dropped. (3.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v3.0.0)

### Fixes and other changes

- jwksUri is optional when a custom fetcher is provided. (3.2.2) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v3.2.2)

## jwks-rsa 2

### Breaking changes

- Callbacks are no longer supported; getSigningKey uses async/await and promises. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)
- The API changed to JwksClient. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)
- Node versions below 10 are no longer supported. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)
- The proxy option has been removed from JwksClient; users can configure a proxy through requestAgent or override the request library with fetcher. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)
- Removed; configure the HTTP(S) Agent directly through requestAgent instead. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)

### New APIs and options

- Allows users to completely override how the request to the jwksUri endpoint is made. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)
- Adds full JWK/JWS support. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)
- Exposes an option to specify the HTTP(S) Agent used by jwksClient. (2.0.0) — [release notes](https://github.com/auth0/node-jwks-rsa/releases/tag/v2.0.0)