Missing request timeout

[Cooke]

Description

Currently the request for fetching keys may never timeout since no timeout is provided to the underlying http request library. In our "shaky" environment we have observed our application "freeze" due to this, forever waiting for new keys. I would expect the library to timeout.

I will associate a pull request with this issue.

Reproduction

It can be reproduced by never accepting or responding to the JWKS request on the remote endpoint.

Environment

Docker alpine nodejs 10 and 12