#195 Use DefaultJWTTokenParser per issuer
Related issues
Acceptance criteria
-
Implemented code changes don't diverge from the related issue. -
Documentation reflects the status quo after merge. -
Version number is incremented according to SemVer. (Snapshot versions are not merged/released.) -
Only released versions of dependencies are used (i.e. no snapshot versions). -
The changelog contains entries reflecting all changes of this MR (and their reasons).
The bug is related to the use of DefaultJWTTokenParser. Since the keys are being cached, we can't use a single instance of DefaultJWTTokenParser for tokens issued by different IDPs.
Co-authored-by: Kevin Schmengler schmengler@riege.com