angular-auth0-aside
angular-auth0-aside copied to clipboard
Bump tough-cookie and jwks-rsa in /server
Removes tough-cookie. It's no longer used after updating ancestor dependency jwks-rsa. These dependencies need to be updated together.
Removes tough-cookie
Updates jwks-rsa from 1.3.0 to 1.12.3
Release notes
Sourced from jwks-rsa's releases.
v1.12.3
[1.12.3] - (2021-02-25)
Added
Fixed
- Fix npmjs resolves #221 (adamjmcgrath)
- Fix Import default Axios instance #216 (dsebastien)
1.12.0
Added
- Provide an alternative source for supplying keysets #292 (davidpatrick)
Deprecation We are deprecating passing in a
jwksObjectto the client for reasons laid out in #292. In order to load keys from anything other than thejwksUri, please use thegetKeysInterceptor.const client = new JwksClient({ jwksUri: 'https://my-enterprise-id-provider/.well-known/jwks.json', getKeysInterceptor: (cb) => { const file = fs.readFileSync(jwksFile); return cb(null, file.keys); } });v1.10.1
Fixed
- fix proxy agent for http #182 (NShahri)
- fix dependencies for --production flag with npm #180 (alexrqs)
v1.10.0
Added
Fixed
- Add missing async methods to Typescript type definitions #163 (mwgamble)
- Fixing proxy on Axios #176 (davidpatrick)
- Fix caching and rateLimiting on getSigningKeyAsync #177 (davidpatrick)
v1.9.0
Added
- Add promisified methods to JwksClient #161 (jimmyjames)
- Update express-jwt ^6.0.0 #157 (davidpatrick)
Fixed
- Update Buffer initialization to non-deprecated method #154 (cwardcode)
- Use axios url parameter instead of baseURL #153 (novascreen)
... (truncated)
Changelog
Sourced from jwks-rsa's changelog.
[1.12.3] - (2021-02-25)
Added
Fixed
- Fix npmjs resolves #221 (adamjmcgrath)
- Fix Import default Axios instance #216 (dsebastien)
[1.12.2] - (2021-01-07)
Fixed
- Added coverage folders to .npmignore
[1.12.1] - (2020-12-29)
Security
[1.12.0] - (2020-12-08)
Added
- Provide an alternative source for supplying keysets #202 (davidpatrick)
Deprecation We are deprecating passing in a
jwksObjectto the client for reasons laid out in #202. In order to load keys from anything other than thejwksUri, please use thegetKeysInterceptor.const client = new JwksClient({ jwksUri: 'https://my-enterprise-id-provider/.well-known/jwks.json', getKeysInterceptor: (cb) => { const file = fs.readFileSync(jwksFile); return cb(null, file.keys); } });[1.11.0] - (2020-10-23)
Added
- Add ability to configure proxy with env vars #188 (lubomir-haralampiev)
[1.10.1] - (2020-09-24)
Fixed
... (truncated)
Commits
f99d2611.12.3 Releasebd4be6aAdd alg to SigningKey types (#220)4679199Import default Axios instance. fix #215. (#216)beb5761Release 1.12.271a895dAdding coverage folder to npmignore818d061Release v1.12.1 (#209)3bbe93fBump Axios to ^0.21.1 (#208)6fa1db0Add types for agent options used by ExpressJwtOptions (#206)ee90de2Fix PR link in changelog (#207)26d760bRelease 1.12.0 (#204)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by davidpatrick0, a new releaser for jwks-rsa since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.