Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade from github.com/form3tech-oss/jwt-go to github.com/golang-jwt/jwt #387

Closed
muir opened this issue Oct 25, 2021 · 2 comments

Comments

@muir
Copy link
Contributor

muir commented Oct 25, 2021

The current JWT library is no longer supported. The upgrade should be painless for this repo but could cause problems for downstream consumers and thus this should be considered a breaking change.

See dgrijalva/jwt-go#462

And there is at least one known vulnerability with the old library: https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMDGRIJALVAJWTGO-596515

@crewjam : if you you would like a PR, I'm happy to make one.

@skillcoder
Copy link

Seems PR already created: #383

@urgas9
Copy link

urgas9 commented Dec 23, 2021

The mentioned PR above has been merged and I believe we can treat this issue as resolved.

@crewjam crewjam closed this as completed Dec 24, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants