Package Install Error on production

[Stavtastic]

I am having issues installing this script, the following error is being served via Heroku. The packages were installed with Webstorm using the --legacy-peer-deps command (otherwise the error keeps crawling back). But deployment fails.

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR!
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/express
npm ERR!   express@"~4.16.1" from the root project
npm ERR!
npm ERR! Could not resolve dependency:
npm ERR! peer express@">= 4.17.0" from [email protected]
npm ERR! node_modules/express-openid-connect
npm ERR!   express-openid-connect@"*" from the root project
npm ERR!
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR!

My list of npm modules -g +-- [email protected] +-- [email protected] +-- [email protected] +-- [email protected] +-- [email protected] `-- [email protected]

I am a bit clueless here as I am new to this auth0 package.

[adamjmcgrath]

Hi @Stavtastic - thanks for raising this

npm ERR! Found: [email protected] npm ERR! node_modules/express npm ERR! express@"~4.16.1" from the root project

This package requires express@>= 4.17.0 and from the error, it looks like you are including 4.16

You need to upgrade your version of express if you want to use this package (4.17 includes a new feature that this SDK relies on)

[Stavtastic]

Hi Adam,

If you take a look at the list of NPM modules, you will see that express is @4.18.1, however the package looks at express-generator for some reason and thinks Express is outdated. This purely happens with express generator, and not if you do a express regular installation.

[adamjmcgrath]

Hi @Stavtastic

Could you run npm ls express?

The error express@"~4.16.1" from the root project is telling me that you have [email protected] installed in your root project

[Stavtastic]

A buddy of mine created a bypass, but you can clearly see that 4.18.1 is installed

PS C:\Users\justi\WebstormProjects\dwl-v2> npm ls express
[email protected] C:\Users\justi\WebstormProjects\dwl-v2
+-- [email protected]
| `-- [email protected] deduped
`-- [email protected]

and if we look deeper in the package json:

{
  "_args": [
    [
      "[email protected]",
      "C:\\Users\\justi\\WebstormProjects\\dwl-v2"
    ]
  ],
  "_from": "[email protected]",
  "_id": "[email protected]",
  "_inBundle": false,
  "_integrity": "sha512-zZBcOX9TfehHQhtupq57OF8lFZ3UZi08Y97dwFCkD8p9d/d2Y3M+ykKcwaMDEL+4qyUolgBDX6AblpR3fL212Q==",
  "_location": "/express",
  "_phantomChildren": {
    "ee-first": "1.1.1",
    "toidentifier": "1.0.1"
  },
  "_requested": {
    "type": "version",
    "registry": true,
    "raw": "[email protected]",
    "name": "express",
    "escapedName": "express",
    "rawSpec": "4.18.1",
    "saveSpec": null,
    "fetchSpec": "4.18.1"
  },

[adamjmcgrath]

Hi @Stavtastic - thanks for sharing that

I can't explain why you're getting an error that says Found: [email protected] when you only have 4.18.1 installed - perhaps you should delete your node_modules directory?

When I do the following:

npx express-generator eg-test
cd eg-test
npm i [email protected]
npm i express-openid-connect

express-openid-connect installs successfully

[adamjmcgrath]

Closing due to innactivity