Update com.nimbusds to 9.15

Closes gh-10287

Author: rwinch

dependencies/spring-security-dependencies.gradle

@@ -18,8 +18,8 @@ dependencies {
 	constraints {
 		api "ch.qos.logback:logback-classic:1.2.6"
 		api "com.google.inject:guice:3.0"
-		api "com.nimbusds:nimbus-jose-jwt:9.11.3"
-		api "com.nimbusds:oauth2-oidc-sdk:9.12"
+		api "com.nimbusds:nimbus-jose-jwt:9.12.1"
+		api "com.nimbusds:oauth2-oidc-sdk:9.15"
 		api "com.squareup.okhttp3:mockwebserver:3.14.9"
 		api "com.squareup.okhttp3:okhttp:3.14.9"
 		api "com.unboundid:unboundid-ldapsdk:4.0.14"

oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusJwtDecoderTests.java

@@ -694,7 +694,7 @@ public void withJwkSetUriWhenUsingCustomTypeHeaderThenRefuseOmittedType() throws
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> jwtDecoder.decode(SIGNED_JWT))
 				.withMessageContaining("An error occurred while attempting to decode the Jwt: "
-						+ "Required JOSE header \"typ\" (type) parameter is missing");
+						+ "Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 

oauth2/oauth2-jose/src/test/java/org/springframework/security/oauth2/jwt/NimbusReactiveJwtDecoderTests.java

@@ -359,7 +359,7 @@ public void withJwkSetUriWhenUsingCustomTypeHeaderThenRefuseOmittedType() {
 				.build();
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.messageReadToken).block())
-				.havingRootCause().withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.havingRootCause().withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
@@ -442,7 +442,7 @@ public void withPublicKeyWhenUsingCustomTypeHeaderThenRefuseOmittedType() throws
 				.build();
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.rsa256).block())
-				.havingRootCause().withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.havingRootCause().withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
@@ -486,7 +486,7 @@ public void withJwkSourceWhenUsingCustomTypeHeaderThenRefuseOmittedType() {
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.messageReadToken).block())
 				.havingRootCause()
-				.withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}
 
@@ -559,7 +559,7 @@ public void withSecretKeyWhenUsingCustomTypeHeaderThenRefuseOmittedType() {
 				.build();
 		assertThatExceptionOfType(BadJwtException.class)
 				.isThrownBy(() -> decoder.decode(this.messageReadToken).block())
-				.havingRootCause().withMessage("Required JOSE header \"typ\" (type) parameter is missing");
+				.havingRootCause().withMessage("Required JOSE header typ (type) parameter is missing");
 		// @formatter:on
 	}