0f6f453ea0
NimbusJwtDecoder's default RestOperations now respects the JDK's sun.net.client.defaultConnectTimeout/defaultReadTimeout system properties, falling back to 30 seconds instead of the previous 500 milliseconds, matching JwtDecoderProviderConfigurationUtils's existing behavior. Also documents this default and the RestOperations override in the reference guide and migration guide (the reference guide's existing "Configuring Timeouts" section already claimed 30 seconds -- it's been inaccurate since the 500ms default shipped and is now correct again), and documents providing a custom JwtDecoderFactory<ClientRegistration> for OAuth2 Login's ID Token decoding. Issue gh-19474 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>