You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@solr.apache.org by "Jan Høydahl (Jira)" <ji...@apache.org> on 2026/04/25 14:38:00 UTC

[jira] [Created] (SOLR-18211) Replace unmaintained bc-jose4j JWT library with nimbus-jose-jwt

Jan Høydahl created SOLR-18211:
----------------------------------

             Summary: Replace unmaintained bc-jose4j JWT library with nimbus-jose-jwt
                 Key: SOLR-18211
                 URL: https://issues.apache.org/jira/browse/SOLR-18211
             Project: Solr
          Issue Type: Improvement
          Components: security
            Reporter: Jan Høydahl


Result of the stale dependency analysis in https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=421957024

The jwt-auth module relies on a security library which has not been updated since March 2024. It is also a single maintainer project. Although no known vulnerabilities or bugs force us to upgrade now, we'll do it for the health of the project's dependencies.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org