:star: New Features

• Remove org.webjars dependencies from demo-authorizationserver sample #1445

:beetle: Bug Fixes

• Default timeout should be set when fetching JWKSet for private_key_jwt #1439
• Expired ID tokens are rejected at the authorization server on an RP-initiated logout #1440
• Fix tests for OAuth2 Authorization Server Metadata Endpoint #1421
• Fix tests for OIDC Provider Configuration Endpoint #1418
• Issuer should not support path component #1437

:hammer: Dependency Upgrades

• Update to Spring Framework 6.0.15 #1480
• Update to Spring Security 6.1.6 #1481