Nimbus has deprecated RemoteJWKSet in favor of using JWKSourceBuilder

By association, JWKSetCache is also deprecated. Since Spring Security has a custom implementation of JWKSetCache, refactoring to wrap a UrlBasedJWKSetSource may be more appropriate than using JWKSourceBuilder.

Comment From: kwondh5217

Hi, @jzheaux

I’d like to work on this issue as my first contribution to Spring Security. Would it be alright if I take this on?

Thank you!

Comment From: franticticktick

Duplicate.

Comment From: kwondh5217

Hi @franticticktick

I noticed that this issue is marked as a duplicate of #15866. I’d like to clarify: should I continue working on this issue, or would it be better to focus on the original issue (#15866)?

If this issue is still valid, I’d be happy to contribute and help resolve it. Please let me know how I can proceed.

Thank you!

Comment From: franticticktick

Hi @kwondh5217, i marked this as a duplicate so that contributors will pay attention to 15866, as there may be nuances that are worth considering. Nothing more :)

Comment From: kwondh5217

Hi @franticticktick, Thank you for explaining! I’ll give it a try. Thanks again!