From 0bbc95dd1d6dbb13f9e43f20a4f0ccf2b9129228 Mon Sep 17 00:00:00 2001
From: Rajat Singh <17253992+rajatcing@users.noreply.github.com>
Date: Thu, 25 Dec 2025 00:34:26 +0530
Subject: [PATCH] docs: update PublicKeyCacheMaxAge and
 DefaultBackChannelLogoutLifetime description (#11229)

<!--
Please inform yourself about the contribution guidelines on submitting a
PR here:
https://github.com/zitadel/zitadel/blob/main/CONTRIBUTING.md#submit-a-pull-request-pr.
Take note of how PR/commit titles should be written and replace the
template texts in the sections below. Don't remove any of the sections.
It is important that the commit history clearly shows what is changed
and why.
Important: By submitting a contribution you agree to the terms from our
Licensing Policy as described here:
https://github.com/zitadel/zitadel/blob/main/LICENSING.md#community-contributions.
-->

# Which Problems Are Solved

Update the description for `PublicKeyCacheMaxAge` and
`DefaultBackChannelLogoutLifetime`

Fixes https://github.com/zitadel/zitadel/issues/10739

Co-authored-by: Rajat Singh <rajat@zitadel.com>
---
 cmd/defaults.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cmd/defaults.yaml b/cmd/defaults.yaml
index 5ce3e078b..75754aa29 100644
--- a/cmd/defaults.yaml
+++ b/cmd/defaults.yaml
@@ -535,7 +535,9 @@ OIDC:
       DashInterval: 4 # ZITADEL_OIDC_DEVICEAUTH_USERCODE_DASHINTERVAL
   DefaultLoginURLV2: "/ui/v2/login/login?authRequest=" # ZITADEL_OIDC_DEFAULTLOGINURLV2
   DefaultLogoutURLV2: "/ui/v2/login/logout?post_logout_redirect=" # ZITADEL_OIDC_DEFAULTLOGOUTURLV2
+  # Internal cache age for public keys to speed up validations (e.g. id_token_hints) on the authorization endpoint.
   PublicKeyCacheMaxAge: 24h # ZITADEL_OIDC_PUBLICKEYCACHEMAXAGE
+  # Lifetime of the token used to notify clients through OIDC back-channel logout when the feature is enabled and registered on the client.
   DefaultBackChannelLogoutLifetime: 15m # ZITADEL_OIDC_DEFAULTBACKCHANNELLOGOUTLIFETIME
 
 SAML: