This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new e46661bb70f ci: bump pac4j.version from 5.7.10 to 5.8.0 (#20624)
e46661bb70f is described below
commit e46661bb70f9858dd238ffb0b8506aa39c0da8da
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Oct 19 09:33:30 2026 +0800
ci: bump pac4j.version from 5.7.10 to 5.8.0 (#20624)
* ci: bump pac4j.version from 5.7.10 to 5.8.0
Bumps `pac4j.version` from 5.7.10 to 5.8.0.
Updates `org.pac4j:pac4j-oidc` from 5.7.10 to 5.8.0
-
[Commits](https://github.com/pac4j/pac4j/compare/pac4j-parent-5.7.10...pac4j-parent-5.8.0)
Updates `org.pac4j:pac4j-javaee` from 5.7.10 to 5.8.0
-
[Commits](https://github.com/pac4j/pac4j/compare/pac4j-parent-5.7.10...pac4j-parent-5.8.0)
Updates `org.pac4j:pac4j-core` from 5.7.10 to 5.8.0
-
[Commits](https://github.com/pac4j/pac4j/compare/pac4j-parent-5.7.10...pac4j-parent-5.8.0)
---
updated-dependencies:
- dependency-name: org.pac4j:pac4j-oidc
dependency-version: 5.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.pac4j:pac4j-javaee
dependency-version: 5.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.pac4j:pac4j-core
dependency-version: 5.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
* fix(pac4j): update TokenValidator API usage
* test(pac4j): update TokenValidator mock expectations
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frank Chen <[email protected]>
---
extensions-core/druid-pac4j/pom.xml | 2 +-
.../main/java/org/apache/druid/security/pac4j/JwtAuthFilter.java | 2 +-
.../java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java | 4 ++--
licenses.yaml | 6 +++---
4 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/extensions-core/druid-pac4j/pom.xml
b/extensions-core/druid-pac4j/pom.xml
index 965d17261c0..8f053ffa9e7 100644
--- a/extensions-core/druid-pac4j/pom.xml
+++ b/extensions-core/druid-pac4j/pom.xml
@@ -34,7 +34,7 @@
</parent>
<properties>
- <pac4j.version>5.7.10</pac4j.version>
+ <pac4j.version>5.8.0</pac4j.version>
<!-- Following must be updated along with any updates to pac4j version.
One can find the compatible version of nimbus libraries in org.pac4j:pac4j-oidc
dependencies-->
<nimbus.lang.tag.version>1.7</nimbus.lang.tag.version>
diff --git
a/extensions-core/druid-pac4j/src/main/java/org/apache/druid/security/pac4j/JwtAuthFilter.java
b/extensions-core/druid-pac4j/src/main/java/org/apache/druid/security/pac4j/JwtAuthFilter.java
index a0132615ff5..239a9c611f1 100644
---
a/extensions-core/druid-pac4j/src/main/java/org/apache/druid/security/pac4j/JwtAuthFilter.java
+++
b/extensions-core/druid-pac4j/src/main/java/org/apache/druid/security/pac4j/JwtAuthFilter.java
@@ -81,7 +81,7 @@ public class JwtAuthFilter implements Filter
if (idToken.isPresent()) {
try {
// Parses the JWT and performs the ID Token validation specified in
the OpenID spec:
https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation
- IDTokenClaimsSet claims =
tokenValidator.validate(JWTParser.parse(idToken.get()), null);
+ IDTokenClaimsSet claims =
tokenValidator.validateIdToken(JWTParser.parse(idToken.get()), null);
if (claims != null) {
Optional<String> claim =
Optional.ofNullable(claims.getStringClaim(oidcConfig.getOidcClaim()));
diff --git
a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
index c961b78e529..513f900b465 100644
---
a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
+++
b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java
@@ -116,7 +116,7 @@ public class JwtAuthenticatorTest
EasyMock.replay(configuration);
TokenValidator tokenValidator = EasyMock.createMock(TokenValidator.class);
- EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(),
EasyMock.anyObject()))
+ EasyMock.expect(tokenValidator.validateIdToken(EasyMock.anyObject(),
EasyMock.anyObject()))
.andReturn(new IDTokenClaimsSet(new Issuer("foo"),
new Subject("testsub"),
Collections.singletonList(new
Audience("testClient")),
@@ -158,7 +158,7 @@ public class JwtAuthenticatorTest
TokenValidator tokenValidator = EasyMock.createMock(TokenValidator.class);
// This doesn't return any claims for the default scope
- EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(),
EasyMock.anyObject()))
+ EasyMock.expect(tokenValidator.validateIdToken(EasyMock.anyObject(),
EasyMock.anyObject()))
.andReturn(new IDTokenClaimsSet(new Issuer("test"),
new Subject("testsub"),
Collections.singletonList(new
Audience("testClient")),
diff --git a/licenses.yaml b/licenses.yaml
index e9a6e43d562..ac1cb124a2b 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -958,7 +958,7 @@ name: pac4j-oidc java security library
license_category: binary
module: extensions/druid-pac4j
license_name: Apache License version 2.0
-version: 5.7.10
+version: 5.8.0
libraries:
- org.pac4j: pac4j-oidc
@@ -968,7 +968,7 @@ name: pac4j-core java security library
license_category: binary
module: extensions/druid-pac4j
license_name: Apache License version 2.0
-version: 5.7.10
+version: 5.8.0
libraries:
- org.pac4j: pac4j-core
@@ -978,7 +978,7 @@ name: pac4j-javaee java security library
license_category: binary
module: extensions/druid-pac4j
license_name: Apache License version 2.0
-version: 5.7.10
+version: 5.8.0
libraries:
- org.pac4j: pac4j-javaee
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
