Upgrade to Spring Security 5.4.5

This commit also downgrade JOSE JWT to address an incompatibility with
the OIDC SDK 8.x. The OIDC SDK has also been upgraded to the latest 8.x
release to align with the version used by Spring Security.

Closes gh-25221
Fixes gh-25070
This commit is contained in:
Andy Wilkinson
2021-02-18 11:33:18 +00:00
parent 08f73e01da
commit bb56de715b

View File

@@ -1196,14 +1196,14 @@ bom {
]
}
}
library("OAuth2 OIDC SDK", "8.23.1") {
library("OAuth2 OIDC SDK", "8.36") {
group("com.nimbusds") {
modules = [
"oauth2-oidc-sdk"
]
}
}
library("Nimbus JOSE JWT", "9.1.3") {
library("Nimbus JOSE JWT", "8.20.2") {
group("com.nimbusds") {
modules = [
"nimbus-jose-jwt"
@@ -1624,7 +1624,7 @@ bom {
]
}
}
library("Spring Security", "5.4.2") {
library("Spring Security", "5.4.5") {
group("org.springframework.security") {
imports = [
"spring-security-bom"