Remove Deprecated Usages of RemoteJWKSet

close spring-projectsgh-16251
kwondh5217 · Dec 18, 2024 · a3a8f23 · a3a8f23
1 parent fa288c2
commit a3a8f23
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/...2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoder.java b/...2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoder.java
@@ -457,8 +457,12 @@ public List<JWK> get(JWKSelector jwkSelector, SecurityContext context) throws Ke
 						return Collections.emptyList();
 					}
 					synchronized (this) {
-						jwkSet = fetchJWKSet();
-						this.jwkSetCache.put(jwkSet);
+						if(jwkSet == this.jwkSetCache.get()) {
+							jwkSet = fetchJWKSet();
+							this.jwkSetCache.put(jwkSet);
+						} else {
+							jwkSet = this.jwkSetCache.get();
+						}
 					}
 					if(jwkSet == null) {
 						return Collections.emptyList();