浏览代码

Restore dependency convergence of nimbus-jose-jwt

This commit reverts the change in 2801cdd which caused the
oauth2-oidc-sdk transitive dependency version of nimbus-jose-jwt to
diverge with the version depended on in spring-security-oauth2-jose.

The downgrade to 9.24.4 is intentional but the upgrade to 9.31 was not.

Issue gh-13333

Closes gh-13843
Steve Riesenberg 1 年之前
父节点
当前提交
4ffece7e66
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      gradle/libs.versions.toml

+ 1 - 1
gradle/libs.versions.toml

@@ -20,7 +20,7 @@ ch-qos-logback-logback-classic = "ch.qos.logback:logback-classic:1.4.11"
 com-fasterxml-jackson-jackson-bom = "com.fasterxml.jackson:jackson-bom:2.14.3"
 com-google-inject-guice = "com.google.inject:guice:3.0"
 com-netflix-nebula-nebula-project-plugin = "com.netflix.nebula:nebula-project-plugin:8.2.0"
-com-nimbusds-nimbus-jose-jwt = "com.nimbusds:nimbus-jose-jwt:9.31"
+com-nimbusds-nimbus-jose-jwt = "com.nimbusds:nimbus-jose-jwt:9.24.4"
 com-nimbusds-oauth2-oidc-sdk = "com.nimbusds:oauth2-oidc-sdk:9.43.3"
 com-squareup-okhttp3-mockwebserver = { module = "com.squareup.okhttp3:mockwebserver", version.ref = "com-squareup-okhttp3" }
 com-squareup-okhttp3-okhttp = { module = "com.squareup.okhttp3:okhttp", version.ref = "com-squareup-okhttp3" }