[java-oidc-common] branch main updated: JCOMOIDC-50 - Update Nimbus oauth2-oidc-sdk into 10.1

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=f3b6db34b2fe36dd0362814f9c1a4e22dc96bf75

The following commit(s) were added to refs/heads/main by this push:
     new f3b6db3  JCOMOIDC-50 - Update Nimbus oauth2-oidc-sdk into 10.1
f3b6db3 is described below

commit f3b6db34b2fe36dd0362814f9c1a4e22dc96bf75
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Oct 28 13:13:30 2022 +0300

    JCOMOIDC-50 - Update Nimbus oauth2-oidc-sdk into 10.1
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-50
    
    Updated the following dependencies:
    - nimbus-jose-jwt: 9.14 to 9.25.6
    - oauth2-oidc-sdk: 9.20 to 10.1
    - json-smart: 2.4.7 to 2.4.8
    - nimbus.lang: 1.5 to 1.7
    - nimbus.content.type: 2.1 to 2.2
    - nimbus.lang.tag: 1.5 to 1.7
    
    Some tests in ExplicitKeySignedJWTTrustEngineTest needed to be modified as Nimbus
    doesn't allow injecting private JWK into the headers anymore. At least the MAC test
    needs further improvements, added a TODO-tag for it.
---
 .../security/impl/ExplicitKeySignedJWTTrustEngineTest.java     |  6 +++---
 pom.xml                                                        | 10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/oidc-common-crypto-impl/src/test/java/net/shibboleth/oidc/security/impl/ExplicitKeySignedJWTTrustEngineTest.java b/oidc-common-crypto-impl/src/test/java/net/shibboleth/oidc/security/impl/ExplicitKeySignedJWTTrustEngineTest.java
index 9dd4cdb..1dddf1e 100644
--- a/oidc-common-crypto-impl/src/test/java/net/shibboleth/oidc/security/impl/ExplicitKeySignedJWTTrustEngineTest.java
+++ b/oidc-common-crypto-impl/src/test/java/net/shibboleth/oidc/security/impl/ExplicitKeySignedJWTTrustEngineTest.java
@@ -383,7 +383,7 @@ public class ExplicitKeySignedJWTTrustEngineTest {
         final var header = new JWSHeader.Builder(algo)
                 .type(JOSEObjectType.JWT)
                 .keyID(keyId)
-                .jwk(key)
+                //.jwk(key) //TODO: FIXME: Nimbus doesnt't allow injecting secret keys into header anymore
                 .build();
         final var payload = buildStandardClaims(issuer, audience);
 
@@ -491,7 +491,7 @@ public class ExplicitKeySignedJWTTrustEngineTest {
         final var header = new JWSHeader.Builder(algo)
                 .type(JOSEObjectType.JWT)
                 .keyID(keyId)
-                .jwk(key)
+                .jwk(key.toPublicJWK())
                 .build();
         final var payload = buildStandardClaims(issuer, audience);
 
@@ -520,7 +520,7 @@ public class ExplicitKeySignedJWTTrustEngineTest {
         final var header = new JWSHeader.Builder(algo)
                 .type(JOSEObjectType.JWT)
                 .keyID(keyId)
-                .jwk(key)
+                .jwk(key.toPublicJWK())
                 .build();
         final var payload = buildStandardClaims(issuer, audience);
 
diff --git a/pom.xml b/pom.xml
index 36fc646..4b31f5b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -20,12 +20,12 @@
         <opensaml.groupId>org.opensaml</opensaml.groupId>
         <opensaml.version>4.2.0</opensaml.version>
         <java-support.version>8.3.1</java-support.version>
-        <nimbus-jose-jwt.version>9.14</nimbus-jose-jwt.version>
-        <oauth2-oidc-sdk.version>9.20</oauth2-oidc-sdk.version>
-        <json.smart.version>2.4.7</json.smart.version>
+        <nimbus-jose-jwt.version>9.25.6</nimbus-jose-jwt.version>
+        <oauth2-oidc-sdk.version>10.1</oauth2-oidc-sdk.version>
+        <json.smart.version>2.4.8</json.smart.version>
         <accessors.smart.version>1.2</accessors.smart.version>
-        <nimbus.lang.tag.version>1.5</nimbus.lang.tag.version>
-        <nimbus.content.type.version>2.1</nimbus.content.type.version>
+        <nimbus.lang.tag.version>1.7</nimbus.lang.tag.version>
+        <nimbus.content.type.version>2.2</nimbus.content.type.version>
         <checkstyle.configLocation>${project.basedir}/checkstyle.xml</checkstyle.configLocation>
     </properties>
     <repositories>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.