Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

[spring-xsuaa] Resolve issues with Nimbus-JOSE-JWT version 9.0 com.nimbusds.jose.Header.toJSONObject usage

See original GitHub issue

With Nimbus-Jose-JWT version 9.0 method com.nimbusds.jose.Header.toJSONObject() signature changes - method returns Map<String, Object> instead of net.minidev.json.JSONObject as per changelog.

As of Spring Security OAuth2 JOSE version 5.4.0 Nimbus-Jose-JWT 9.0 is used.

Find usages in spring xsuaa modules and resolve potential java.lang.NoSuchMethodError errors.

Issue Analytics

State:
Created 3 years ago
Reactions:2
Comments:9 (5 by maintainers)

Top GitHub Comments

1reaction

liga-ozcommented, Dec 10, 2020

Hi @Sachpat,

if you specify explicitly the jose-jwt library like here and no other methods you use require the newer version of jose-jwt it should be possible.

Best Regards, Liga

1reaction

Sachpatcommented, Dec 10, 2020

Hi @liga-oz @nenaraab this is one of the questions from our secBOM users @patrickhuy , Do you know whether it’s possible to use spring boot 2.4.x and downgrade spring security and jose-jwt and then use the xsuaa lib?

Top Results From Across the Web

connect2id / Nimbus-JOSE-JWT / issues / #366 - Caused by ...

When I tried with version 7.8.1, it accepts “at+jwt”. But version 8.9 is not accepting “at+jwt”. I am using nimbus with spring security ......

Header (Nimbus JOSE + JWT v9.13) - javadoc.io

Returns a Base64URL representation of the header. Map<String,Object>, toJSONObject(). Returns a JSON object representation of the header.

JOSE object / JSON Web Token (JWT) parsing - Connect2id

import com.nimbusds.jose.*; String string = "eyJhbGciOiJIUzI1NiJ9..."; PlainObject plainObject; try { plainObject = PlainObject.parse(string); } catch ...

com.nimbusds.jose.Header Maven / Gradle / Ivy

com.nimbusds:nimbus-jose-jwt - Snyk Vulnerability Database

version published direct vulnerabilities 9.25.6 13 Oct, 2022 0. C. 0. H. 0. M. 0. L 9.25.5 11 Oct, 2022 0. C. 0. H. 0....