All jdks to 21

Author: doombubbles

.github/workflows/gradle-test.yml

@@ -12,8 +12,8 @@ jobs:
       - run: git lfs checkout
       - uses: actions/setup-java@v4
         with:
-          java-version: '23'
-          distribution: oracle
+          java-version: '21'
+          distribution: temurin
       - uses: actions/setup-node@v4
         with:
           node-version: 18

.github/workflows/server.yaml

@@ -14,8 +14,8 @@ jobs:
       - run: git lfs checkout
       - uses: actions/setup-java@v4
         with:
-          java-version: '23'
-          distribution: oracle
+          java-version: '21'
+          distribution: temurin
       - uses: actions/setup-node@v4
         with:
           node-version: 18

.github/workflows/website.yaml

@@ -15,8 +15,8 @@ jobs:
       - run: git lfs checkout
       - uses: actions/setup-java@v4
         with:
-          java-version: '23'
-          distribution: oracle
+          java-version: '21'
+          distribution: temurin
       - uses: actions/setup-node@v4
         with:
           node-version: 18

spellsource-server/build.gradle

@@ -377,7 +377,7 @@ def spellsourceTags = ['latest', project.version.toString()]
 def spellsourceImage = 'ghcr.io/hiddenswitch/spellsource'
 jib {
   from {
-    image = "eclipse-temurin:23-ubi9-minimal"
+    image = "eclipse-temurin:21-ubi9-minimal"
   }
   to {
     image = spellsourceImage

spellsource-web/src/pages/api/auth/[...nextauth].ts

@@ -14,7 +14,7 @@ const NextOptions: NextAuthOptions = {
       clientId,
       clientSecret,
       issuer,
-      checks: "none",
+      checks: process.env.NODE_ENV === "production" ? "pkce" : "none",
       authorization: {
         params: { scope: "openid profile email offline_access" },
       },