java.lang.ClassNotFoundException: com.nimbusds.jose.RemoteKeySourceException

[Former user]

There are vulnerabilities in nimbus-jose-jwt ver 7.8 so we started using ver 7.9 by changing POM

Added version 7.9 for Nimbus-JOSE-JWT by doing following: <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-oauth2-client</artifactId> <exclusions> <exclusion> <groupId>com.nimbusds</groupId> <artifactId>nimbus-jose-jwt</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>com.nimbusds</groupId> <artifactId>nimbus-jose-jwt</artifactId> <version>7.9</version> <type>pom</type> </dependency>

But it is creating errors 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] 2020-08-05 20:05:09.779 ERROR 25 --- [nio-8080-exec-7] o.a.c.c.C.[.[.[/].[dispatcherServlet] : Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Filter execution threw an exception] with root cause 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] java.lang.ClassNotFoundException: com.nimbusds.jose.RemoteKeySourceException 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] at java.base/java.net.URLClassLoader.findClass(Unknown Source) ~[na:na] 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] at java.base/java.lang.ClassLoader.loadClass(Unknown Source) ~[na:na] 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] at org.springframework.boot.loader.LaunchedURLClassLoader.loadClass(LaunchedURLClassLoader.java:92) ~[app/:na] 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] at java.base/java.lang.ClassLoader.loadClass(Unknown Source) ~[na:na] 2020-08-05T16:05:09.780-04:00 [APP/PROC/WEB/0] [OUT] at org.springframework.security.oauth2.client.oidc.authentication.OidcIdTokenDecoderFactory.buildDecoder(OidcIdTokenDecoderFactory.java:156) ~[spring-security-oauth2-client-5.2.1.RELEASE.jar:5.2.1.RELEASE]

Can you please help with fixing it.

[Yavor Vasilev]

Hi, Our suggestion is to resolve this with the spring security project.