From b13cb4421f8891a98a7568dbeef7af0c7b4d8ce4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 26 Aug 2026 23:53:59 +0000 Subject: [PATCH 1/2] build(deps): bump com.nimbusds:oauth2-oidc-sdk from 10.8 to 11.38.2 Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) from 10.8 to 11.38.2. - [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.38.2..10.8) --- updated-dependencies: - dependency-name: com.nimbusds:oauth2-oidc-sdk dependency-version: 11.38.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- extensions-core/druid-pac4j/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/extensions-core/druid-pac4j/pom.xml b/extensions-core/druid-pac4j/pom.xml index 63e85fa514f7..328c9b7a7bc3 100644 --- a/extensions-core/druid-pac4j/pom.xml +++ b/extensions-core/druid-pac4j/pom.xml @@ -39,7 +39,7 @@ 1.7 10.9.1 - 10.8 + 11.38.2 From be42d8303dc139a39bc067eda4beb45a039955e6 Mon Sep 17 00:00:00 2001 From: Frank Chen Date: Thu, 27 Aug 2026 11:12:53 +0800 Subject: [PATCH 2/2] build(deps): align Nimbus 11.38.2 metadata and tests --- .../druid/security/pac4j/JwtAuthenticatorTest.java | 14 ++++++++------ licenses.yaml | 4 ++-- 2 files changed, 10 insertions(+), 8 deletions(-) diff --git a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java index 2e65beecb925..c961b78e5299 100644 --- a/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java +++ b/extensions-core/druid-pac4j/src/test/java/org/apache/druid/security/pac4j/JwtAuthenticatorTest.java @@ -22,6 +22,7 @@ import com.google.common.collect.ImmutableMap; import com.nimbusds.jose.JOSEException; import com.nimbusds.jose.proc.BadJOSEException; +import com.nimbusds.oauth2.sdk.id.Audience; import com.nimbusds.oauth2.sdk.id.Issuer; import com.nimbusds.oauth2.sdk.id.Subject; import com.nimbusds.openid.connect.sdk.claims.IDTokenClaimsSet; @@ -38,6 +39,7 @@ import javax.servlet.http.HttpServletResponse; import java.io.IOException; import java.util.Collections; +import java.util.Date; public class JwtAuthenticatorTest { @@ -117,9 +119,9 @@ public void testValidClaim() EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(), EasyMock.anyObject())) .andReturn(new IDTokenClaimsSet(new Issuer("foo"), new Subject("testsub"), - Collections.emptyList(), - null, - null + Collections.singletonList(new Audience("testClient")), + new Date(1000), + new Date(0) )); EasyMock.replay(tokenValidator); @@ -159,9 +161,9 @@ public void testEmptyClaim() EasyMock.expect(tokenValidator.validate(EasyMock.anyObject(), EasyMock.anyObject())) .andReturn(new IDTokenClaimsSet(new Issuer("test"), new Subject("testsub"), - Collections.emptyList(), - null, - null + Collections.singletonList(new Audience("testClient")), + new Date(1000), + new Date(0) )); EasyMock.replay(tokenValidator); diff --git a/licenses.yaml b/licenses.yaml index 475f8273b1e7..bbade7a21582 100644 --- a/licenses.yaml +++ b/licenses.yaml @@ -988,7 +988,7 @@ name: com.nimbusds content-type license_category: binary module: extensions/druid-pac4j license_name: Apache License version 2.0 -version: 2.2 +version: 2.3 libraries: - com.nimbusds: content-type @@ -998,7 +998,7 @@ name: com.nimbusds oauth2-oidc-sdk license_category: binary module: extensions/druid-pac4j license_name: Apache License version 2.0 -version: 10.8 +version: 11.38.2 libraries: - com.nimbusds: oauth2-oidc-sdk