The class DefaultJWKSetCache of nimbus-jose-jwt has two fields, lifespan and refreshTime. From Java docs – lifespan – The lifespan of the cached JWK set before it expires, negative means no expiration. refreshTime – The time after which the cached JWK set is marked for refresh, negative if not specified. Should be shorter or equal to the lifespan. What is the