[JAMES-3686] Upgrade JWT's lib version

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.0
• Fix Version/s: 3.7.0
• Assignee: Unassigned
• Reporter: Tung TRAN
• Created: 15/Dec/21 03:17
• Updated: 16/Dec/21 08:54
• Resolved: 16/Dec/21 08:53

Description

Why

A long time since the last JJWT's lib version that we use (0.9.1 release from 2018).
3 years old for a crypto lib is not glop.

Current:

<dependency>
   <groupId>io.jsonwebtoken</groupId>
   <artifactId>jjwt</artifactId>
   <version>0.9.1</version>
</dependency>

How
Use the new version: https://github.com/jwtk/jjwt

<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt-api</artifactId>
    <version>0.11.2</version>
</dependency>
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt-impl</artifactId>
    <version>0.11.2</version>
    <scope>runtime</scope>
</dependency>
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt-jackson</artifactId> 
    <version>0.11.2</version>
    <scope>runtime</scope>
</dependency>

Issue Links

• links to: GitHub Pull Request #797