The code from pac4j-config-4.5.2 has a dependency on com.nimbusds lib in OidcClientBuilder.

When trying to satisfy the dependency it creates a conflict with the JSONArray library. Our code brings in net.minidev.json.JSONArray while nimbusds has its own version com.nimbusds.jose.shaded.json.JSONArray.

We should remove the hard dependency to net.minidev and instead use the common List interface which would allow either JSONArray class to work.

Notes
Issue caused by nimbus v9. Use v8.22.