This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 45464960e94 build(deps): bump com.nimbusds:oauth2-oidc-sdk from 10.8
to 11.38.2 (#20160)
45464960e94 is described below
commit 45464960e94c696cf721ba9e3d8207b676a3eef0
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Aug 28 09:46:52 2026 +0800
build(deps): bump com.nimbusds:oauth2-oidc-sdk from 10.8 to 11.38.2 (#20160)
* build(deps): bump com.nimbusds:oauth2-oidc-sdk from 10.8 to 11.38.2
Bumps
[com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)
from 10.8 to 11.38.2.
-
[Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
-
[Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.38.2..10.8)
---
updated-dependencies:
- dependency-name: com.nimbusds:oauth2-oidc-sdk
dependency-version: 11.38.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]>
* build(deps): align Nimbus 11.38.2 metadata and tests
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frank Chen <[email protected]>
---
extensions-core/druid-pac4j/pom.xml | 2 +-
.../apache/druid/security/pac4j/JwtAuthenticatorTest.java | 14 ++++++++------
licenses.yaml | 4 ++--
3 files changed, 11 insertions(+), 9 deletions(-)
diff --git a/extensions-core/druid-pac4j/pom.xml
b/extensions-core/druid-pac4j/pom.xml
index 63e85fa514f..328c9b7a7bc 100644
--- a/extensions-core/druid-pac4j/pom.xml
+++ b/extensions-core/druid-pac4j/pom.xml
@@ -39,7 +39,7 @@
<!-- Following must be updated along with any updates to pac4j version.
One can find the compatible version of nimbus libraries in org.pac4j:pac4j-oidc
dependencies-->
<nimbus.lang.tag.version>1.7</nimbus.lang.tag.version>
<nimbus.jose.jwt.version>10.9.1</nimbus.jose.jwt.version>
- <oauth2.oidc.sdk.version>10.8</oauth2.oidc.sdk.version>
+ <oauth2.oidc.sdk.version>11.38.2</oauth2.oidc.sdk.version>
</properties>
<dependencies>
diff --git
a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
index 2e65beecb92..c961b78e529 100644
---
a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
+++
b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
@@ -22,6 +22,7 @@ package org.apache.druid.security.pac4j;
import com.google.common.collect.ImmutableMap;
import com.nimbusds.jose.JOSEException;
import com.nimbusds.jose.proc.BadJOSEException;
+import com.nimbusds.oauth2.sdk.id.Audience;
import com.nimbusds.oauth2.sdk.id.Issuer;
import com.nimbusds.oauth2.sdk.id.Subject;
import com.nimbusds.openid.connect.sdk.claims.IDTokenClaimsSet;
@@ -38,6 +39,7 @@ import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Collections;
+import java.util.Date;
public class JwtAuthenticatorTest
{
@@ -117,9 +119,9 @@ public class JwtAuthenticatorTest
EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(),
EasyMock.anyObject()))
.andReturn(new IDTokenClaimsSet(new Issuer("foo"),
new Subject("testsub"),
- Collections.emptyList(),
- null,
- null
+ Collections.singletonList(new
Audience("testClient")),
+ new Date(1000),
+ new Date(0)
));
EasyMock.replay(tokenValidator);
@@ -159,9 +161,9 @@ public class JwtAuthenticatorTest
EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(),
EasyMock.anyObject()))
.andReturn(new IDTokenClaimsSet(new Issuer("test"),
new Subject("testsub"),
- Collections.emptyList(),
- null,
- null
+ Collections.singletonList(new
Audience("testClient")),
+ new Date(1000),
+ new Date(0)
));
EasyMock.replay(tokenValidator);
diff --git a/licenses.yaml b/licenses.yaml
index 62b7d8aa1f3..1dbab0c45c3 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -988,7 +988,7 @@ name: com.nimbusds content-type
license_category: binary
module: extensions/druid-pac4j
license_name: Apache License version 2.0
-version: 2.2
+version: 2.3
libraries:
- com.nimbusds: content-type
@@ -998,7 +998,7 @@ name: com.nimbusds oauth2-oidc-sdk
license_category: binary
module: extensions/druid-pac4j
license_name: Apache License version 2.0
-version: 10.8
+version: 11.38.2
libraries:
- com.nimbusds: oauth2-oidc-sdk
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
