Merge pull request #440 from fcojfernandez/bump-nimbus-jose-jwt

Use a FIPS compliant version of nimbus-jose-jwt
jenkinsci · Oct 24, 2024 · ccc7061 · ccc7061
2 parents b5d5c2a + 68e4d40
commit ccc7061
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -64,6 +64,16 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!--
+      Let's use a FIPS compliant version of nimbus-jose-jwt
+      TODO Remove when pac4j includes this version or a newer one
+      -->
+      <dependency>
+        <groupId>com.nimbusds</groupId>
+        <artifactId>nimbus-jose-jwt</artifactId>
+        <version>9.41</version>
+      </dependency>
+      <!-- end -->
       <dependency>
         <!-- do not exlude the annotations so we can benifit from spotbugs checks but set the to provided so we do not bundle them -->
         <groupId>com.github.stephenc.jcip</groupId>