fix(gateway): migrate jjwt to 0.12.6 and fix removed Spring WebClient FormDataSpec

- CasdoorIdTokenVerifier: RSAKey does not exist in any jjwt release;
  build RSAPublicKey from JWKS n/e via RSAPublicKeySpec, use 0.12 parser API
- JwtUtils / UserService: parserBuilder/parseClaimsJws -> parser()/parseSignedClaims
- CasdoorClient: WebClient.RequestBodySpec.FormDataSpec removed in Spring 6.2,
  use BodyInserters.FormDataSpec

backend/shared/security-common/pom.xml

@@ -1,46 +1,46 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project xmlns="http://maven.apache.org/POM/4.0.0"
-         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
-         http://maven.apache.org/xsd/maven-4.0.0.xsd">
-    <modelVersion>4.0.0</modelVersion>
-
-    <parent>
-        <groupId>com.deepdata</groupId>
-        <artifactId>services</artifactId>
-        <version>1.0.0-SNAPSHOT</version>
-        <relativePath>../../services/pom.xml</relativePath>
-    </parent>
-
-    <artifactId>security-common</artifactId>
-    <name>Security Common</name>
-    <description>安全通用组件</description>
-
-    <dependencies>
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-security</artifactId>
-        </dependency>
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
-        </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-api</artifactId>
-            <version>0.11.5</version>
-        </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-impl</artifactId>
-            <version>0.11.5</version>
-            <scope>runtime</scope>
-        </dependency>
-        <dependency>
-            <groupId>io.jsonwebtoken</groupId>
-            <artifactId>jjwt-jackson</artifactId>
-            <version>0.11.5</version>
-            <scope>runtime</scope>
-        </dependency>
-    </dependencies>
-</project>
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
+         http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <parent>
+        <groupId>com.deepdata</groupId>
+        <artifactId>services</artifactId>
+        <version>1.0.0-SNAPSHOT</version>
+        <relativePath>../../services/pom.xml</relativePath>
+    </parent>
+
+    <artifactId>security-common</artifactId>
+    <name>Security Common</name>
+    <description>安全通用组件</description>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-security</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-oauth2-resource-server</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt-api</artifactId>
+            <version>0.12.6</version>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt-impl</artifactId>
+            <version>0.12.6</version>
+            <scope>runtime</scope>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt-jackson</artifactId>
+            <version>0.12.6</version>
+            <scope>runtime</scope>
+        </dependency>
+    </dependencies>
+</project>

backend/shared/security-common/src/main/java/com/deepdata/common/security/JwtUtils.java

@@ -37,11 +37,11 @@ public class JwtUtils {
         tokenClaims.put("sub", username);
 
         return Jwts.builder()
-            .setClaims(tokenClaims)
-            .setSubject(username)
-            .setIssuedAt(new Date())
-            .setExpiration(new Date(System.currentTimeMillis() + expiration * 1000))
-            .signWith(getSigningKey(), SignatureAlgorithm.HS512)
+            .claims(tokenClaims)
+            .subject(username)
+            .issuedAt(new Date())
+            .expiration(new Date(System.currentTimeMillis() + expiration * 1000))
+            .signWith(getSigningKey())
             .compact();
     }
 
@@ -63,11 +63,11 @@ public class JwtUtils {
      * 从令牌中获取声明
      */
     public Claims getClaimsFromToken(String token) {
-        return Jwts.parserBuilder()
-            .setSigningKey(getSigningKey())
+        return Jwts.parser()
+            .verifyWith(getSigningKey())
             .build()
-            .parseClaimsJws(token)
-            .getBody();
+            .parseSignedClaims(token)
+            .getPayload();
     }
 
     /**
@@ -99,8 +99,8 @@ public class JwtUtils {
         claims.setExpiration(new Date(System.currentTimeMillis() + expiration * 1000));
 
         return Jwts.builder()
-            .setClaims(claims)
-            .signWith(getSigningKey(), SignatureAlgorithm.HS512)
+            .claims(claims)
+            .signWith(getSigningKey())
             .compact();
     }
 }