Skip to content

Upgrade Nimbus to v11.0 and move it to test only #2509

@MathieuCalba

Description

@MathieuCalba

Is your feature request related to a problem? Please describe.

Security fixes have been on Nimbus since version 10.0.2, see the changelog https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt. Also, it seems that the library isn’t even used in the production SDK, but only in tests: https://github.com/search?q=repo%3AAzureAD%2Fmicrosoft-authentication-library-for-android%20nimbus&type=code. So moving the library to a test only dependency would be appropriate.

Describe the solution you'd like

Upgrade Nimbus to version 11.0 and move it to a test only dependency.

Version of the MSAL: latest (8.3.2)

Metadata

Metadata

Assignees

No one assigned

    Labels

    OtherIT - Miscellaneous issue, no immediate classification seems fittingneeds-more-info

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions