refactor: upgrade jwks-rsa from 1.12.3 to 2.0.5 #7800
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade jwks-rsa from 1.12.3 to 2.0.5. See this package in npm: https://www.npmjs.com/package/jwks-rsa See this project in Snyk: https://app.snyk.io/org/acinader/project/21343059-02d9-4182-87d7-718a44b181ef?utm_source=github&utm_medium=referral&page=upgrade-pr
|
I will reformat the title to use the proper commit message syntax. |
parse-github-assistant
bot
changed the title
Codecov Report
@@ Coverage Diff @@
## alpha #7800 +/- ##
==========================================
- Coverage 94.20% 94.20% -0.01%
==========================================
Files 182 182
Lines 13587 13587
==========================================
- Hits 12800 12799 -1
- Misses 787 788 +1
Continue to review full report at Codecov.
|
Contributor
|
🎉 This change has been released in version 5.0.0-alpha.24 |
Contributor
|
🎉 This change has been released in version 5.0.0-beta.10 |
Contributor
|
🎉 This change has been released in version 5.1.0 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade jwks-rsa from 1.12.3 to 2.0.5.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
Release notes
Package name: jwks-rsa
-
2.0.5 - 2021-10-15
- Destroy the request when reaches the timeout (#270) #271 (amrsalama)
- SDK-2833 Fix issue where errors were being cached #268 (adamjmcgrath)
-
2.0.4 - 2021-07-16
-
2.0.3 - 2021-04-22
- Fix retrieveSigningKeys error #242 (davidpatrick)
- Bump jose from 2.0.3 to 2.0.5 #244 (dependabot)
-
2.0.2 - 2021-03-25
- Interceptor bind client #237 (erikfried)
- Update type def for getSigningKey #236 (davidpatrick)
- Use hostname instead of host when creating request #233 (cjlpowers)
-
2.0.1 - 2021-03-13
- Callback backwards compatbility for
- Fix typescript declarations for v2 #229 (davidpatrick)
- Fix typescript types for fetcher #231 (itajaja)
-
2.0.0 - 2021-03-11
- Drops support for Node < 10
- No more callbacks, using async/await(promises)
- Removed Axios and changed the API to JwksClient
- Full JWK/JWS Support #205 (panva)
- Simplify request wrapper #218 (davidpatrick)
- Pins to Node Version 10,12,14 #212 (davidpatrick)
- Migrate from callbacks to async/await #222 (davidpatrick)
https://sandrino.auth0.com/.well-known/jwks.json',
https://sandrino.auth0.com/.well-known/jwks.json',
// OLD
- Add alg to SigningKey types #220 (okko)
- Fix npmjs resolves #221 (adamjmcgrath)
- Fix Import default Axios instance #216 (dsebastien)
from jwks-rsa GitHub release notesFixed
…386317c08d8
[Snyk] Upgrade debug from 4.1.1 to 4.3.2
[2.0.3] - (2021-04-20)
Fixed
Security
[2.0.2] - (2021-03-24)
Fixed
[2.0.1] - (2021-03-12)
Added
getSigningKey#227 (davidpatrick)Fixed
With version 2 we have added full JWK/JWS support, bumped Node version support to minimum 10, removed Axios, and exposed a
fetcheroption to allow user's to completely override how the request to thejwksUriendpoint is made.Please take note of the breaking changes and the migration guide below.
Breaking Changes
Changes
Added
Changed
Migration Guide from v1 to v2
Proxies
The proxy option has been removed from the JwksClient. Support for it was a little spotty through Axios, and we wanted to allow users to have more control over the flow. Now you can specify your proxy by overriding the
requestAgentused with an agent with built-in proxy support, or by completely overriding the request library with thefetcheroption.requestAgent: new HttpsProxyAgent('https://username:pass@address:port')
});">
Request Agent Options
The library no longer gates what http(s) Agent is used, so we have removed
requestAgentOptionsand now expose therequestAgentoption when creating ajwksClient.requestAgent: new https.Agent({
ca: fs.readFileSync(caFile)
})
});">
Migrated Callbacks to Async/Await
The library no longer supports callbacks. We have migrated to async/await(promises).
client.getSigningKey(kid, (err, key) => {
const signingKey = key.getPublicKey();
});
// NEW
const key = await client.getSigningKey(kid);
const signingKey = key.getPublicKey();
1.12.3 - 2021-02-26
[1.12.3] - (2021-02-25)
Added
Fixed
Commit messages
Package name: jwks-rsa
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs