Merge pull request quarkusio#48096 from quarkusio/dependabot/maven/smallrye-jwt.version-4.6.2

Bump smallrye-jwt.version from 4.6.1 to 4.6.2

Author: sberyozkin

bom/application/pom.xml

@@ -53,7 +53,7 @@
         <smallrye-open-api.version>4.0.10</smallrye-open-api.version>
         <smallrye-graphql.version>2.13.0</smallrye-graphql.version>
         <smallrye-fault-tolerance.version>6.9.1</smallrye-fault-tolerance.version>
-        <smallrye-jwt.version>4.6.1</smallrye-jwt.version>
+        <smallrye-jwt.version>4.6.2</smallrye-jwt.version>
         <smallrye-context-propagation.version>2.2.1</smallrye-context-propagation.version>
         <smallrye-reactive-streams-operators.version>1.0.13</smallrye-reactive-streams-operators.version>
         <smallrye-reactive-types-converter.version>3.0.3</smallrye-reactive-types-converter.version>

docs/src/main/asciidoc/security-jwt-build.adoc

@@ -370,6 +370,7 @@ SmallRye JWT supports the following properties, which can be used to customize h
 |`smallrye.jwt.new-token.issuer` |none |Token issuer used to set an `iss` (issuer) claim value if this claim has not already been set.
 |`smallrye.jwt.new-token.audience` |none |Token audience used to set an `aud` (audience) claim value if this claim has not already been set.
 |`smallrye.jwt.new-token.override-matching-claims` |`false` | Set this property to `true` for `smallrye.jwt.new-token.issuer` and `smallrye.jwt.new-token.audience` values to override the already initialized `iss` (issuer) and `aud` (audience) claims.
+|smallrye.jwt.new-token.add-default-claims|true|Set this property to `false` to disable an automatic addition of the `iat` (issued at), `exp` (expiration time) and `jti` (token identifier) claims when such claims have not already been set.
 |`smallrye.jwt.keystore.type` |`JKS` |This property can be used to customize a keystore type if either `smallrye.jwt.sign.key.location` or `smallrye.jwt.encrypt.key.location` or both of these properties point to a `KeyStore` file. If it is not set then the file name will be checked to determine the keystore type before defaulting to `JKS`.
 |`smallrye.jwt.keystore.provider` | |This property can be used to customize a `KeyStore` provider if `smallrye.jwt.sign.key.location` or `smallrye.jwt.encrypt.key.location` point to a `KeyStore` file.
 |`smallrye.jwt.keystore.password` | |Keystore password. If `smallrye.jwt.sign.key.location` or `smallrye.jwt.encrypt.key.location` point to a `KeyStore` file, this property must be set.

integration-tests/oidc-dpop/src/main/java/io/quarkus/it/keycloak/FrontendResource.java

@@ -193,7 +193,7 @@ private String createDPopProofForKeycloak(KeyPair keyPair, String tenantId) thro
         return Jwt.claim("htm", "POST")
                 .claim("htu", getConfigMetadata(tenantId).getTokenUri())
                 .jws()
-                .header("typ", "dpop+jwt")
+                .type("dpop+jwt")
                 .jwk(keyPair.getPublic())
                 .sign(keyPair.getPrivate());
     }