[CXF-7505] Oauth2 keystore loading inconsistent with jwt keys

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.0
• Fix Version/s: 3.1.14, 3.2.1
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Romain Manni-Bucau
• Created: 15/Sep/17 06:45
• Updated: 28/Nov/17 10:51
• Resolved: 19/Sep/17 09:45

Description

org.apache.cxf.rs.security.jose.common.KeyManagementUtils#loadPersistKeyStore set a keystore in the exchange and org.apache.cxf.rs.security.jose.jwk.JwkUtils#loadJwkSet(org.apache.cxf.message.Message, java.util.Properties, org.apache.cxf.rs.security.jose.common.PrivateKeyPasswordProvider) loads JsonWebKeys which can lead to classcastexception