Try latest jjwt

Author: artem-v

jwt/pom.xml

@@ -15,8 +15,16 @@
 
   <dependencies>
     <dependency>
-      <groupId>com.auth0</groupId>
-      <artifactId>java-jwt</artifactId>
+      <groupId>io.jsonwebtoken</groupId>
+      <artifactId>jjwt-api</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>io.jsonwebtoken</groupId>
+      <artifactId>jjwt-impl</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>io.jsonwebtoken</groupId>
+      <artifactId>jjwt-jackson</artifactId>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>

jwt/src/main/java/io/scalecube/security/jwt/JwksTokenResolver.java

@@ -1,8 +1,11 @@
 package io.scalecube.security.jwt;
 
-import com.auth0.jwt.JWT;
-import com.auth0.jwt.algorithms.Algorithm;
-import java.security.interfaces.RSAPublicKey;
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.Jwt;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.LocatorAdapter;
+import io.jsonwebtoken.ProtectedHeader;
+import java.security.Key;
 import java.util.concurrent.CompletableFuture;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
@@ -25,12 +28,28 @@ public JwksTokenResolver(JwksKeyProvider keyProvider) {
   public CompletableFuture<JwtToken> resolveToken(String token) {
     return CompletableFuture.supplyAsync(
             () -> {
-              final var rawToken = JWT.decode(token);
-              final var kid = rawToken.getKeyId();
-              final var publicKey = (RSAPublicKey) keyProvider.getKey(kid);
-              final var verifier = JWT.require(Algorithm.RSA256(publicKey, null)).build();
-              verifier.verify(token);
-              return JwtToken.parseToken(token);
+              final Jwt<?, ?> parse =
+                  Jwts.parser()
+                      .keyLocator(
+                          new LocatorAdapter<>() {
+                            @Override
+                            protected Key locate(ProtectedHeader header) {
+                              final var keyId = header.getKeyId();
+                              return keyProvider.getKey(keyId);
+                            }
+                          })
+                      .build()
+                      .parse(token);
+
+              parse.getHeader();
+
+              // final var rawToken = JWT.decode(token);
+              // final var kid = rawToken.getKeyId();
+              // final var publicKey = (RSAPublicKey) keyProvider.getKey(kid);
+              // final var verifier = JWT.require(Algorithm.RSA256(publicKey, null)).build();
+              // verifier.verify(token);
+
+              return new JwtToken(parse.getHeader(), (Claims) parse.getPayload());
             })
         .handle(
             (jwtToken, ex) -> {

pom.xml

@@ -44,7 +44,7 @@
     <vault-java-driver.version>5.1.0</vault-java-driver.version>
     <jackson.version>2.19.2</jackson.version>
     <slf4j.version>1.7.36</slf4j.version>
-    <auth0.java-jwt.version>4.5.0</auth0.java-jwt.version>
+    <jjwt.version>0.13.0</jjwt.version>
 
     <mockito-junit.version>5.20.0</mockito-junit.version>
     <mockito-inline.version>5.2.0</mockito-inline.version>
@@ -72,11 +72,13 @@
         <artifactId>slf4j-api</artifactId>
         <version>${slf4j.version}</version>
       </dependency>
-      <!-- Auth0/JWT -->
+      <!-- Jsonwebtoken -->
       <dependency>
-        <groupId>com.auth0</groupId>
-        <artifactId>java-jwt</artifactId>
-        <version>${auth0.java-jwt.version}</version>
+        <groupId>io.jsonwebtoken</groupId>
+        <artifactId>jjwt-bom</artifactId>
+        <version>${jjwt.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
       </dependency>
       <!-- Jackson -->
       <dependency>