Spring Security Make NimbusJwtClientAuthenticationParametersConverter support Microsoft identity platform.

Expected Behavior

NimbusJwtClientAuthenticationParametersConverter can be used directly for Microsoft identity platform .

Current Behavior

NimbusJwtClientAuthenticationParametersConverter can not be used directly for Microsoft identity platform .

Context

Reason I guess it's caused by: 1. There is no "typ" and "x5t" in the header. 2. There is no "nbf" in the claim set.

Proposals 1. Add these fields ("typ", "x5t" and "nbf") in NimbusJwtClientAuthenticationParametersConverter. 2. Make these fields ("typ", "x5t" and "nbf") configurable in NimbusJwtClientAuthenticationParametersConverter. For example, pass in by constructor.

Comment From: jgrandja

@chenrujun This is a duplicate of gh-9852. We'll soon be adding support for customizing claims via gh-9855.