spring-security Provided uncached way to use (Reactive)OidcIdTokenDecoderFactory

Hello.

Sorry for ignoring issue creating.

If ClientRegistration is managed by db, it's unreal to update jwsAlgorithm or jwksUri without restarting the app.

So I added possibility not to use ConcurrentHashMap on decoder creation to build new one everytime. It will be useful in some multi-integration cases.

Fixes gh-12816

Feb 25 '25 21:02 iigolovko

Hey @iigolovko thanks for your valuable suggestion, but it would be better to create a ticket for this feature. It is quite possible that as a result of discussion we will find another solution if necessary.

Feb 26 '25 10:02 franticticktick

fixes #16655

Apr 11 '25 07:04 mipo256

Hey @iigolovko thanks for your valuable suggestion, but it would be better to create a ticket for this feature. It is quite possible that as a result of discussion we will find another solution if necessary.

Looks like https://github.com/spring-projects/spring-security/issues/16655 affects a lot. Any chance that can be reviewed and handled somehow? @franticticktick

Apr 11 '25 07:04 orchestr7

Thanks for the updates @iigolovko. This is now merged.

Oct 14 '25 15:10 jgrandja