Centrifugo PRO is an extended version of Centrifugo with a set of additional features. These features can provide your business with unique benefits – drastically save development time, reduce resource usage on a server, protect your backend from misusing, and put the system observability to the next level.

More details and feature description can be found in Centrifugo PRO docs.

What's changed

• Everything from Centrifugo OSS v6.10.2
• Server API JWKS authentication reuses verified tokens. Server API clients send the same token with many requests, so Centrifugo now verifies its signature once and reuses the result while the key which verified it is still the JWKS endpoint's key. Expiration is checked on every request, and the signature is verified again at least every minute. JWKS authentication now costs about as much as an API key: in our benchmark a publish request with an RS256 token takes 1.7 µs of CPU instead of 24 µs. See docs.
• Changed: server API answers 503 when its JWKS endpoint can't be reached. When no key fetched before can verify the token, the HTTP API now answers 503 and the GRPC API Unavailable, instead of 401 and Unauthenticated, so clients retry rather than treat their credentials as wrong. Keys fetched before keep verifying tokens while the endpoint is down. See docs.