fix: cache lock for threading support

.github/workflows/publish.yml

@@ -18,9 +18,6 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
-      - name: Install Task
-        uses: arduino/setup-task@v1
-
       - name: Install Poetry
         uses: snok/install-poetry@v1
         with:
@@ -38,9 +35,6 @@ jobs:
         if: steps.cached-poetry-dependencies.outputs.cache-hit != 'true'
         run: poetry install --no-interaction --no-root
 
-      - name: Run CI
-        run: task ci
-
       - name: Build wheels
         run: |
           poetry version $(git tag --points-at HEAD)

.github/workflows/tests.yml

@@ -21,12 +21,6 @@ jobs:
         uses: actions/setup-python@v1
         with:
           python-version: ${{ matrix.python-version }}
-
-      - name: Install Task
-        uses: arduino/setup-task@v1
 
       - name: Install Poetry
         uses: snok/install-poetry@v1
-
-      - name: Run CI
-        run: task ci

README.md

@@ -24,17 +24,19 @@
 
 ---
 
-Simple library for using a third party authentication service with 
+Simple library for using a third party authentication service with
 [FastAPI](https://github.com/tiangolo/fastapi). Verifies and decrypts 3rd party
 OpenID Connect tokens to protect your endpoints.
 
 Easily used with authentication services such as:
+
 - [Keycloak](https://www.keycloak.org/) (open source)
-- [SuperTokens](https://supertokens.io/) (open source)
+- [SuperTokens](https://supertokens.com/) (open source)
 - [Auth0](https://auth0.com/)
 - [Okta](https://www.okta.com/products/authentication/)
 
 FastAPI's generated interactive documentation supports the grant flows:
+
 ```python3
 GrantType.AUTHORIZATION_CODE
 GrantType.IMPLICIT

fastapi_third_party_auth/discovery.py

@@ -1,12 +1,12 @@
 from typing import Dict
-
 import requests
 from cachetools import TTLCache
 from cachetools import cached
+from threading import Lock
 
 
 def configure(*_, cache_ttl: int):
-    @cached(TTLCache(1, cache_ttl), key=lambda d: d["jwks_uri"])
+    @cached(TTLCache(1, cache_ttl), key=lambda d: d["jwks_uri"], lock=Lock())
     def get_authentication_server_public_keys(OIDC_spec: Dict):
         """
         Retrieve the public keys used by the authentication server
@@ -21,7 +21,7 @@ def get_signing_algos(OIDC_spec: Dict):
         algos = OIDC_spec["id_token_signing_alg_values_supported"]
         return algos
 
-    @cached(TTLCache(1, cache_ttl))
+    @cached(TTLCache(1, cache_ttl), lock=Lock())
     def discover_auth_server(*_, openid_connect_url: str) -> Dict:
         r = requests.get(openid_connect_url)
         # Raise if the auth server is failing since we can't verify tokens