Fix isk claim removal from refreshed id token when the user attributes are updated #3231

	# This workflow will build the project on pull requests with tests
	# Uses:
	# OS: ubuntu-latest
	# JDK: Adopt JDK 11 and Adopt JDK 17

	name: PR Builder

	on:
	pull_request:
	branches: [main, master]
	workflow_dispatch:

	env:
	MAVEN_OPTS: -Xmx4g -Xms1g

	jobs:
	build:
	runs-on: ubuntu-latest

	env:
	JAVA_TOOL_OPTIONS: "-Djdk.util.zip.disableZip64ExtraFieldValidation=true -Djdk.nio.zipfs.allowDotZipEntry=true"

	strategy:
	matrix:
	# Will add the 17 once Nashorn is removed.
	java-version: [ 11 ]

	steps:
	- uses: actions/checkout@v2
	- name: Set up Adopt JDK 11 and 17
	uses: actions/setup-java@v2
	with:
	java-version: ${{ matrix.java-version }}
	distribution: "adopt"
	- name: Cache local Maven repository
	id: cache-maven-m2
	uses: actions/cache@v2
	env:
	cache-name: cache-m2
	with:
	path: ~/.m2/repository
	key: ${{ runner.os }}-maven-${{ env.cache-name }}-${{ hashFiles('**/pom.xml') }}
	restore-keys: \|
	${{ runner.os }}-maven-${{ env.cache-name }}-
	${{ runner.os }}-maven-
	${{ runner.os }}-
	- name: Build with Maven
	run: mvn clean install -U -B
	- name: Delete SNAPSHOT artifacts
	run: find ~/.m2/repository/ -name "*-SNAPSHOT" -type d -print -prune -exec rm -r {} +
	- name: Generate coverage report
	run: mvn test jacoco:report
	- name: Upload coverage reports to Codecov
	uses: codecov/codecov-action@v4
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	files : target/site/jacoco/jacoco.xml
	flags: unit

Provide feedback