From: Reinhard Tartler
Subject: Revert back to go-jose v2

This reverts:

commit 7bf125c5120e99d5ff7fd579650ffcc84df8edc6
Author: Miloslav Trmač <mitr@redhat.com>
Date:   Tue Feb 14 09:23:14 2023 +0100

    Migrate from gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v3 (#969)

    https://github.com/square/go-jose/tree/master says the former is deprecated.
    Moving everything to /v3 will, eventually, allow callers to only contain one
    vendored implementation instead of up to 3.

    Signed-off-by: Miloslav Trmač <mitr@redhat.com>


diff --git a/pkg/oauthflow/flow.go b/pkg/oauthflow/flow.go
index c5251c3..38df970 100644
--- b/pkg/oauthflow/flow.go
+++ a/pkg/oauthflow/flow.go
@@ -21,9 +21,9 @@
 	"errors"

 	"github.com/coreos/go-oidc/v3/oidc"
-	"github.com/go-jose/go-jose/v3"
 	soauth "github.com/sigstore/sigstore/pkg/oauth"
 	"golang.org/x/oauth2"
+	"gopkg.in/square/go-jose.v2"
 )

 const (
diff --git a/pkg/oauthflow/flow_test.go b/pkg/oauthflow/flow_test.go
index 703ec98..8eba8e6 100644
--- b/pkg/oauthflow/flow_test.go
+++ a/pkg/oauthflow/flow_test.go
@@ -26,8 +26,8 @@
 	"reflect"
 	"testing"

-	"github.com/go-jose/go-jose/v3"
 	"golang.org/x/oauth2"
+	"gopkg.in/square/go-jose.v2"
 )

 func TestGetCodeWorking(t *testing.T) {