We need to add appropriate exclusions to the org.apache.httpcomponents:httpclient dependency in the main pom.xml file. In particular, we should exclude:

• org.apache.httpcomponents:httpcore
• commons-logging:commons-logging
• commons-codec:commons-codec

Note that a dependency on org.apache.httpcomponents:httpcore should be added to the main pom.xml and to the http/oidc pom.xml file.