From ac3fbdf5f2416a06db84e6b2ad7ae39ea635d84a Mon Sep 17 00:00:00 2001
From: Clement Delafargue <clement.delafargue.ext@outscale.com>
Date: Thu, 27 Apr 2023 10:41:05 +0200
Subject: [PATCH 1/2] bump biscuit-auth to 3.1.0

---
 Cargo.lock | 8 ++++----
 Cargo.toml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 6a1e802..804c3bf 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -25,9 +25,9 @@ checksum = "9e1b586273c5702936fe7b7d6896644d8be71e6314cfe09d3167c95f712589e8"
 
 [[package]]
 name = "biscuit-auth"
-version = "3.0.0"
+version = "3.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d87a1439f6aa59801e9e061cd8c0ad44fb04271aad581d948b2c690dbc0376f6"
+checksum = "47033e72ae01c3bea9385503636ba8cf54083bd52df80eccee088f806d7a0b42"
 dependencies = [
  "base64",
  "biscuit-parser",
@@ -66,9 +66,9 @@ dependencies = [
 
 [[package]]
 name = "biscuit-quote"
-version = "0.2.0"
+version = "0.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b82c219bdfbbb102f3899b90cae4f04599a8be392234e998b94a25296c06bf41"
+checksum = "4df264964d58df014dbbb60ce879a7194aabcc8f34cb85ff69ef68a1940a3d0b"
 dependencies = [
  "biscuit-parser",
  "proc-macro-error",
diff --git a/Cargo.toml b/Cargo.toml
index 193cb4a..0212394 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -11,7 +11,7 @@ crate-type = ["cdylib", "rlib"]
 
 [dependencies]
 base64 = "0.13.0"
-biscuit-auth = { version = "3.0.0", features = ["wasm", "serde-error"] }
+biscuit-auth = { version = "3.1.0", features = ["wasm", "serde-error"] }
 console_error_panic_hook = "0.1.7"
 hex = "0.4.3"
 log = "0.4.14"

From 08276ff213741887041dc5446b1ed2a8c672e97b Mon Sep 17 00:00:00 2001
From: Clement Delafargue <clement.delafargue.ext@outscale.com>
Date: Thu, 27 Apr 2023 10:41:15 +0200
Subject: [PATCH 2/2] Don't consume third-party blocks when appending the m to
 a biscuit

Now that `ThirdPartyBlock` implements `Clone`, we can take a reference
to it instead of consuming it. This is a good thing since we try to
avoid consuming parameters when they're supplied from JS land (consuming
an argument mutates it, which is a bit surprising for users).
---
 src/lib.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/lib.rs b/src/lib.rs
index 27a33f8..f2a6944 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -153,12 +153,12 @@ impl Biscuit {
     pub fn append_third_party(
         &self,
         external_key: &PublicKey,
-        block: ThirdPartyBlock,
+        block: &ThirdPartyBlock,
     ) -> Result<Biscuit, JsValue> {
         let next_keypair = KeyPair::new();
         Ok(Biscuit(
             self.0
-                .append_third_party_with_keypair(external_key.0, block.0, next_keypair.0)
+                .append_third_party_with_keypair(external_key.0, block.0.clone(), next_keypair.0)
                 .map_err(|e| serde_wasm_bindgen::to_value(&e).unwrap())?,
         ))
     }