Jan Høydahl created SOLR-18211:
----------------------------------
Summary: Replace unmaintained bc-jose4j JWT library with
nimbus-jose-jwt
Key: SOLR-18211
URL: https://issues.apache.org/jira/browse/SOLR-18211
Project: Solr
Issue Type: Improvement
Components: security
Reporter: Jan Høydahl
Result of the stale dependency analysis in
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=421957024
The jwt-auth module relies on a security library which has not been updated
since March 2024. It is also a single maintainer project. Although no known
vulnerabilities or bugs force us to upgrade now, we'll do it for the health of
the project's dependencies.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
