2.21.1 (2026-11-09) Bug Fixes keep cached signing keys when the key endpoint returns no keys (#836) (6c00e49) only match tenants the token actually contains (#833) (8153c94) refresh cached signing keys and limit unknown kid refetches (#832) (abc5ab8) set Secure on generated cookies and time out SDK requests (#677) (3b3b87a)
