Giacomo Baso 7b282c3a17 Relax client_id validation in AtJwtBuilder ...

RFC 9068 requires that access token JWTs include the `client_id`
claim, but it does not require resource servers to validate it against
a specific value.

Relates to gh-18381

Signed-off-by: Giacomo Baso <gbaso@users.noreply.github.com>

2026-03-20 15:38:27 -06:00

..

src

Relax client_id validation in AtJwtBuilder

2026-03-20 15:38:27 -06:00

spring-security-oauth2-jose.gradle

Enable null-safety in spring-security-oauth2-jose

2026-03-13 11:58:29 -04:00