9d2273e8a7
OidcClientContext.discover() and OidcTokenHolder.fetchToken() obtain InputStreams from HttpURLConnection.getInputStream() and getErrorStream() but never explicitly close them after reading. Wrap these streams in try-with-resources to ensure proper cleanup.