in src/main/java/org/apache/geronimo/microprofile/impl/jwtauth/jwt/KidMapper.java [85:96]
public String loadKey(final String property) {
String value = keyMapping.get(property);
if (value == null) {
value = tryLoad(property);
if (value != null && !property.equals(value) /* else we can leak easily*/) {
keyMapping.putIfAbsent(property, value);
} else if (defaultKey != null) {
value = defaultKey;
}
}
return value;
}