Possibly misleading log in DefaultReactiveOpenIdTokenResponseValidator

[mancze]

Expected Behavior

DefaultReactiveOpenIdTokenResponseValidator should not make assumptions about implementation of the injected ReactiveJsonWebTokenValidator.

Actual Behaviour

DefaultReactiveOpenIdTokenResponseValidator assumes specifc implementation of the injected ReactiveJsonWebTokenValidator on the following line with logging:

micronaut-security/security-oauth2/src/main/java/io/micronaut/security/oauth2/endpoint/token/response/validation/DefaultReactiveOpenIdTokenResponseValidator.java

Line 84 in f3d4a88

LOG.trace("Validating the JWT signature using the JWKS uri [{}]", openIdProviderMetadata.getJwksUri());

This log could be misleading: injected implementation of the validator doesn't have to use JWKS uri from the openid metadata at all or it might be configured via configuration (https://micronaut-projects.github.io/micronaut-security/4.9.0/guide/index.html#jwks)

Steps To Reproduce

No response

Environment Information

No response

Example Application

No response

Version

4.5.0 (micronaut-security: 4.9.0)