Fix JRuby EC key generation specs

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: pboling

.rubocop_gradual.lock

@@ -6,15 +6,15 @@
     [166, 3, 39, "Gemspec/DependencyVersion: Dependency version specification is required.", 190611830],
     [167, 3, 45, "Gemspec/DependencyVersion: Dependency version specification is required.", 1496807756]
   ],
-  "spec/lib/omniauth/strategies/jwt_spec.rb:1409726614": [
+  "spec/lib/omniauth/strategies/jwt_spec.rb:3056129689": [
     [3, 1, 40, "RSpec/SpecFilePathFormat: Spec path should end with `omni_auth/strategies/jwt*_spec.rb`.", 1545891400],
-    [12, 13, 25, "RSpec/DescribedClass: Use `described_class` instead of `OmniAuth::Strategies::JWT`.", 2234488924],
-    [24, 11, 15, "RSpec/ContextWording: Context description should match /^when\\b/, /^with\\b/, or /^without\\b/.", 391893083],
-    [34, 11, 16, "RSpec/ContextWording: Context description should match /^when\\b/, /^with\\b/, or /^without\\b/.", 1409468707],
-    [121, 9, 20, "RSpec/StubbedMock: Prefer `allow` over `expect` when configuring a response.", 2951559342],
-    [125, 5, 125, "RSpec/LeakyLocalVariable: Do not use local variables defined outside of examples inside of them.", 689775740],
-    [135, 5, 56, "Performance/RedundantMerge: Use `algos[OpenSSL::PKey::EC] = %w[ES256 ES384 ES512]` instead of `algos.merge!(OpenSSL::PKey::EC => %w[ES256 ES384 ES512])`.", 2983772293],
-    [165, 13, 28, "RSpec/ContextWording: Context description should match /^when\\b/, /^with\\b/, or /^without\\b/.", 1877551307]
+    [20, 13, 25, "RSpec/DescribedClass: Use `described_class` instead of `OmniAuth::Strategies::JWT`.", 2234488924],
+    [32, 11, 15, "RSpec/ContextWording: Context description should match /^when\\b/, /^with\\b/, or /^without\\b/.", 391893083],
+    [42, 11, 16, "RSpec/ContextWording: Context description should match /^when\\b/, /^with\\b/, or /^without\\b/.", 1409468707],
+    [129, 9, 20, "RSpec/StubbedMock: Prefer `allow` over `expect` when configuring a response.", 2951559342],
+    [133, 5, 125, "RSpec/LeakyLocalVariable: Do not use local variables defined outside of examples inside of them.", 689775740],
+    [143, 5, 56, "Performance/RedundantMerge: Use `algos[OpenSSL::PKey::EC] = %w[ES256 ES384 ES512]` instead of `algos.merge!(OpenSSL::PKey::EC => %w[ES256 ES384 ES512])`.", 2983772293],
+    [173, 13, 28, "RSpec/ContextWording: Context description should match /^when\\b/, /^with\\b/, or /^without\\b/.", 1877551307]
   ],
   "spec/spec_helper.rb:2608937500": [
     [50, 3, 34, "RSpec/Output: Do not write to stdout in specs.", 1097326571],

CHANGELOG.md

@@ -28,6 +28,10 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Fixed
 
+- Restored JRuby 9.2 and 9.3 CI coverage for ECDSA JWT decode specs by using
+  the older OpenSSL EC key generation API when `OpenSSL::PKey::EC.generate` is
+  unavailable.
+
 ### Security
 
 ## [0.1.1] - 2026-06-16

spec/lib/omniauth/strategies/jwt_spec.rb

@@ -1,6 +1,14 @@
 require "spec_helper"
 
 RSpec.describe OmniAuth::Strategies::JWT do
+  def generate_ec_private_key(curve_name)
+    return OpenSSL::PKey::EC.generate(curve_name) if OpenSSL::PKey::EC.respond_to?(:generate)
+
+    key = OpenSSL::PKey::EC.new(curve_name)
+    key.generate_key
+    key
+  end
+
   let(:response_json) { JSON.parse(last_response.body) }
   let(:rand_secret) { SecureRandom.hex(10) }
   let(:args) { [rand_secret, {auth_url: "http://example.com/login"}] }
@@ -143,7 +151,7 @@
               private_key_class.generate(2048)
                 .to_pem
             elsif private_key_class == OpenSSL::PKey::EC
-              private_key_class.generate(ecdsa_named_curves[algorithm])
+              generate_ec_private_key(ecdsa_named_curves[algorithm])
                 .to_pem
             else
               private_key_class.new(rand_secret)