diff -Nru ruby-doorkeeper-openid-connect-1.8.5/CHANGELOG.md ruby-doorkeeper-openid-connect-1.8.7/CHANGELOG.md
--- ruby-doorkeeper-openid-connect-1.8.5/CHANGELOG.md	2023-02-02 11:46:55.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/CHANGELOG.md	2023-05-18 07:03:10.000000000 +0000
@@ -2,6 +2,14 @@
 
 - [#PR ID] Add your changelog entry here.
 
+## v1.8.7 (2023-05-18)
+
+- [#198] Fully qualify `JWT::JWK::Thumbprint` constant with :: (thanks to @stanhu)
+
+## v1.8.6 (2023-05-12)
+
+- [#194] Default to RFC 7638 kid fingerprint generation (thanks to @stanhu).
+
 ## v1.8.5 (2023-02-02)
 
 - [#186] Simplify gem configuration reusing Doorkeeper configuration option DSL (thanks to @nbulaj).
@@ -10,6 +18,9 @@
 
 ## v1.8.4 (2023-02-01)
 
+Note that v1.8.4 changed the default kid fingerprint generation from RFC 7638 to a format
+based on the SHA256 digest of the key element. To restore the previous behavior, upgrade to v1.8.6.
+
 - [#177] Replace `json-jwt` with `ruby-jwt` to align with doorkeeper-jwt (thanks to @kristof-mattei).
 - [#185] Don't call active_record_options for Doorkeeper >= 5.6.3 (thanks to @zavan).
 - [#183] Stop render consent screen when user is not logged-in (thanks to @nov).
diff -Nru ruby-doorkeeper-openid-connect-1.8.5/debian/changelog ruby-doorkeeper-openid-connect-1.8.7/debian/changelog
--- ruby-doorkeeper-openid-connect-1.8.5/debian/changelog	2023-06-28 22:38:43.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/debian/changelog	2023-07-09 05:40:34.000000000 +0000
@@ -1,3 +1,9 @@
+ruby-doorkeeper-openid-connect (1.8.7-1) unstable; urgency=medium
+
+  * New upstream version 1.8.7
+
+ -- Pirate Praveen <praveen@debian.org>  Sun, 09 Jul 2023 11:10:34 +0530
+
 ruby-doorkeeper-openid-connect (1.8.5-2) unstable; urgency=medium
 
   * Reupload to unstable
diff -Nru ruby-doorkeeper-openid-connect-1.8.5/lib/doorkeeper/openid_connect/version.rb ruby-doorkeeper-openid-connect-1.8.7/lib/doorkeeper/openid_connect/version.rb
--- ruby-doorkeeper-openid-connect-1.8.5/lib/doorkeeper/openid_connect/version.rb	2023-02-02 11:46:55.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/lib/doorkeeper/openid_connect/version.rb	2023-05-18 07:03:10.000000000 +0000
@@ -2,6 +2,6 @@
 
 module Doorkeeper
   module OpenidConnect
-    VERSION = '1.8.5'
+    VERSION = '1.8.7'
   end
 end
diff -Nru ruby-doorkeeper-openid-connect-1.8.5/lib/doorkeeper/openid_connect.rb ruby-doorkeeper-openid-connect-1.8.7/lib/doorkeeper/openid_connect.rb
--- ruby-doorkeeper-openid-connect-1.8.5/lib/doorkeeper/openid_connect.rb	2023-02-02 11:46:55.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/lib/doorkeeper/openid_connect.rb	2023-05-18 07:03:10.000000000 +0000
@@ -48,7 +48,7 @@
         else
           OpenSSL::PKey.read(configuration.signing_key)
         end
-      ::JWT::JWK.new(key)
+      ::JWT::JWK.new(key, { kid_generator: ::JWT::JWK::Thumbprint })
     end
 
     def self.signing_key_normalized
diff -Nru ruby-doorkeeper-openid-connect-1.8.5/spec/dummy/config/initializers/jwt.rb ruby-doorkeeper-openid-connect-1.8.7/spec/dummy/config/initializers/jwt.rb
--- ruby-doorkeeper-openid-connect-1.8.5/spec/dummy/config/initializers/jwt.rb	2023-02-02 11:46:55.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/spec/dummy/config/initializers/jwt.rb	1970-01-01 00:00:00.000000000 +0000
@@ -1,3 +0,0 @@
-# frozen_string_literal: true
-
-::JWT.configuration.jwk.kid_generator_type = :rfc7638_thumbprint
diff -Nru ruby-doorkeeper-openid-connect-1.8.5/spec/lib/oauth/authorization/code_spec.rb ruby-doorkeeper-openid-connect-1.8.7/spec/lib/oauth/authorization/code_spec.rb
--- ruby-doorkeeper-openid-connect-1.8.5/spec/lib/oauth/authorization/code_spec.rb	2023-02-02 11:46:55.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/spec/lib/oauth/authorization/code_spec.rb	2023-05-18 07:03:10.000000000 +0000
@@ -18,6 +18,7 @@
       allow(pre_auth).to receive(:nonce).and_return('123456')
       allow(pre_auth).to receive(:code_challenge).and_return('987654')
       allow(pre_auth).to receive(:code_challenge_method).and_return('plain')
+      allow(pre_auth).to receive(:custom_access_token_attributes).and_return({})
       allow(client).to receive(:id).and_return('client_id')
 
       allow(Doorkeeper::AccessGrant).to receive(:create!) { access_grant }
diff -Nru ruby-doorkeeper-openid-connect-1.8.5/spec/rails_helper.rb ruby-doorkeeper-openid-connect-1.8.7/spec/rails_helper.rb
--- ruby-doorkeeper-openid-connect-1.8.5/spec/rails_helper.rb	2023-02-02 11:46:55.000000000 +0000
+++ ruby-doorkeeper-openid-connect-1.8.7/spec/rails_helper.rb	2023-05-18 07:03:10.000000000 +0000
@@ -53,7 +53,6 @@
 
   # Reinitialize configuration after each example
   config.after do
-    load Rails.root.join('config/initializers/jwt.rb')
     load Rails.root.join('config/initializers/doorkeeper.rb')
     load Rails.root.join('config/initializers/doorkeeper_openid_connect.rb')
   end