Term Kind Topic What it is
JWKS JSON Web Key Set protocol Tokens & JWTs A published endpoint listing an issuer's current public keys, allowing resource servers to validate token signatures without a shared secret and to survive key rotation.
Refresh Token concept Tokens & JWTs A long-lived credential used solely to obtain new short-lived access tokens, so sessions can persist without long-lived access tokens circulating.
Revocation Window Token Lifetime as SLA, Local Validation Trade concept Tokens & JWTs The period during which a revoked credential remains accepted, which for locally-validated tokens is exactly the token lifetime - the unavoidable price of removing the identity provider from the request path.
Token Audience Validation Audience Restriction, aud Claim practice Tokens & JWTs Verifying that a signed token was issued for the service consuming it, without which a legitimately obtained low-privilege token is replayable against a high-privilege service.
Token Revocation Gap concept Tokens & JWTs The window between deciding a token should no longer be valid and it actually ceasing to work, which for self-contained tokens is its remaining lifetime.