From 68e4d40289018a5607740b3cd1930a40f0990837 Mon Sep 17 00:00:00 2001
From: Francisco Javier Fernandez Gonzalez <fjfernandez@cloudbees.com>
Date: Thu, 24 Oct 2024 14:49:01 +0200
Subject: [PATCH] Use a FIPS compliant version of nimbus-jose-jwt

---
 pom.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pom.xml b/pom.xml
index 5fe0d288..3651ad2b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -64,6 +64,16 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!--
+      Let's use a FIPS compliant version of nimbus-jose-jwt
+      TODO Remove when pac4j includes this version or a newer one
+      -->
+      <dependency>
+        <groupId>com.nimbusds</groupId>
+        <artifactId>nimbus-jose-jwt</artifactId>
+        <version>9.41</version>
+      </dependency>
+      <!-- end -->
       <dependency>
         <!-- do not exlude the annotations so we can benifit from spotbugs checks but set the to provided so we do not bundle them -->
         <groupId>com.github.stephenc.jcip</groupId>