Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade jwt library #5

Merged
merged 1 commit into from
Aug 18, 2021
Merged

Upgrade jwt library #5

merged 1 commit into from
Aug 18, 2021

Conversation

lwsanty
Copy link
Owner

@lwsanty lwsanty commented Aug 18, 2021

andygrunwald#343

https://github.com/dgrijalva/jwt-go has been abondoned (see dgrijalva/jwt-go#462). In order to fix the vulnarability we have to switch to a community driven fork https://github.com/golang-jwt/jwt . The issue has been fixed in golang-jwt/jwt#12

(cherry picked from commit fff481a)

Description

Please describe what does this Pull Request fix or add?.

Information that is useful here:

  • The What: What is your change doing?
  • The Why: Why is your change useful/needed? What is your use case? (this helps us to understand the real world better)
  • Type of change: Things like Bugfix, New feature, Code quality improvements, Dependency upgrade, Documentation, ...
  • Breaking change: Yes or no? Backward compatible?
  • Related to an issue: Does this fix or close an issue? Or is related in any kind?
  • Jira Version + Type: Which Jira version and type (on-premise / cloud) you have used?

Example:

Let us know how users can use or test this functionality.

// Example code

Checklist

andygrunwald#343

 https://github.com/dgrijalva/jwt-go has been abondoned (see dgrijalva/jwt-go#462). In order to fix the vulnarability we have to switch to a community driven fork https://github.com/golang-jwt/jwt . The issue has been fixed in golang-jwt/jwt#12

(cherry picked from commit fff481a)
@lwsanty lwsanty self-assigned this Aug 18, 2021
@lwsanty lwsanty merged commit 1a90726 into master Aug 18, 2021
@lwsanty lwsanty deleted the update-jwt branch August 18, 2021 14:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants