The quickstart depends on com.nimbusds.jose-jwt, which is a managed artifact in WildFly but not present in any WildFly BOM, so the quickstart is managing it's version locally, something which unfortunately requires manual sync of versions. 

AFAIK the usage of this dependency was actually supposed to be temporary, please confim if that is the case, and either change to a dep managed by BOMs, or ultimately add com.nimbusds.jose-jwt to MicroProfile BOM if no alternative exists.