From b527d21beae6d44ab9c184129cfc3dd32c25af18 Mon Sep 17 00:00:00 2001
From: SZ Li <mkk@daedalia.us>
Date: Sun, 21 Sep 2025 11:04:03 +0800
Subject: [PATCH] =?UTF-8?q?Add=20=E6=9B=B4=E5=AE=89=E5=85=A8=E7=9A=84?=
 =?UTF-8?q?=E5=BB=BA=E8=AE=AE=EF=BC=9A=E5=AE=9A=E6=9C=9F=E6=9B=B4=E6=96=B0?=
 =?UTF-8?q?jwk(=E6=9B=BF=E6=8D=A2=E6=97=A7=E7=9A=84jwk=E6=88=96=E6=96=B0?=
 =?UTF-8?q?=E6=97=A7=E8=BD=AE=E6=B5=81)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/com/monkeyk/sos/config/OAuth2ServerConfiguration.java   | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/main/java/com/monkeyk/sos/config/OAuth2ServerConfiguration.java b/src/main/java/com/monkeyk/sos/config/OAuth2ServerConfiguration.java
index 30bc73d..70cf7c3 100644
--- a/src/main/java/com/monkeyk/sos/config/OAuth2ServerConfiguration.java
+++ b/src/main/java/com/monkeyk/sos/config/OAuth2ServerConfiguration.java
@@ -215,6 +215,7 @@ public class OAuth2ServerConfiguration {
      * 提供加密/解密的 source
      * 可多个 key, 根据不同的需要来选择使用
      * TODO: 请在不同的环境使用不同的key(即更换jwks.json中的文件内容); 如何生成不同的key请参考 JwksTest.java 类.
+     * 更安全的建议：定期更新jwk(替换旧的jwk或新旧轮流)
      *
      * @return JWKSource
      * @since 3.0.0