AC-13209::Investigate the latest version of web-token/jwt-framework

Author: glo71317

app/code/Magento/JwtFrameworkAdapter/Model/JweBuilderFactory.php

@@ -51,9 +51,11 @@ public function __construct(
      */
     public function create(): JWEBuilder
     {
-        return new JWEBuilder(
-            $this->algoManager,
-            $this->contentAlgoManager
+        // jwt-framework v4 expects a single AlgorithmManager containing BOTH key and content algorithms.
+        $allAlgorithms = array_merge(
+            $this->algoManager->all(),
+            $this->contentAlgoManager->all()
         );
+        return new JWEBuilder(new AlgorithmManager($allAlgorithms));
     }
 }

app/code/Magento/JwtFrameworkAdapter/Model/JweCompressionManagerFactory.php

@@ -52,12 +52,13 @@ public function __construct(
      */
     public function create(): JWELoader
     {
+        $allAlgorithms = array_merge(
+            $this->algoManager->all(),
+            $this->contentAlgoManager->all()
+        );
         return new JWELoader(
             $this->serializers,
-            new JWEDecrypter(
-                $this->algoManager,
-                $this->contentAlgoManager
-            ),
+            new JWEDecrypter(new \Jose\Component\Core\AlgorithmManager($allAlgorithms)),
             null
         );
     }

app/code/Magento/JwtFrameworkAdapter/Model/JweLoaderFactory.php

@@ -21,7 +21,7 @@
 
 /**
  * @SuppressWarnings(PHPMD.CouplingBetweenObjects)
- * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+ * @SuppressWarnings(PHPMD.UnusedPrivateField)
  */
 class InstallStoreConfigurationCommand extends AbstractSetupCommand
 {