SOLR-18211 Migrate jwt-auth module from bc-jose4j to nimbus-jose-jwt#4334

Draft

janhoy wants to merge 12 commits intoapache:mainfrom

janhoy:feature/migrate-jwt-nimbus

Commits on Apr 25, 2026

Migrate jwt-auth module from bc-jose4j to nimbus-jose-jwt
janhoy
committed
Use 'unmaintained' instead of 'end-of-life' in changelog
janhoy
committed
Rename JWTVerificationkeyResolver to IssuerAwareJWSKeySelector
janhoy
committed
Fix errorprone UnnecessarilyFullyQualified: use imported ParseException
janhoy
committed
Implement refresh reprieve in JwkSetFetcher to prevent IdP hammering
janhoy
committed
Fix errorprone UnnecessarilyFullyQualified in JWTIssuerConfig
janhoy
committed
Fix JWK round-trip bug in asConfig(): serialize as standard JWK Set format
janhoy
committed
Validate iss value whenever present, regardless of requireIssuer flag
janhoy
committed
Replace SolrException with KeySourceException in multi-issuer no-iss path
janhoy
committed
Clarify Javadoc on buildResourceRetriever to match actual behaviour
janhoy
committed
Add unit tests for migration coverage and fix jwt-auth doc bugs
janhoy
committed
Clarify blockUnknown default and description in jwt-auth ref guide
janhoy
committed