HTTPRequest uses system default encoding

[Emond Papegaaij]

HTTPRequest.send creates an InputStreamReader without specifying an Charset, causing it to use system default encoding. This is in violation with the OAuth 2 and OIDC specifications, as these require UTF-8. These problems are most likely to manifest itself on the userinfo endpoint.

DefaultResourceRetriever also creates an InputStreamReader using the system default.

[Connect2id OSS]

Thanks Emond!

UTF-8 is now explicitly set, see commit f518b19.

The fix will go out as v5.27.1 in a few minutes.