540 Commits
Author SHA1 Message Date
adamjmcgrath 673fd97665 fix tests 2022-12-23 12:39:21 +00:00
dependabot[bot]andGitHub 20cf0f1752 Bump jsonwebtoken from 8.5.1 to 9.0.0
Bumps [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) from 8.5.1 to 9.0.0.
- [Release notes](https://github.com/auth0/node-jsonwebtoken/releases)
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/auth0/node-jsonwebtoken/compare/v8.5.1...v9.0.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
2022-12-22 11:06:13 +00:00
dependabot[bot]andEwan Harris 7d0e48f296 Bump minimatch and mocha
Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.1.2 and updates ancestor dependency [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `minimatch` from 3.0.4 to 3.1.2
- [Release notes](https://github.com/isaacs/minimatch/releases)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.0.4...v3.1.2)

Updates `mocha` from 6.2.3 to 10.1.0
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v6.2.3...v10.1.0)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
- dependency-name: mocha
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
2022-12-07 09:52:19 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3dc21a82bb Bump express from 4.17.1 to 4.17.3 (#341)
Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.17.3.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.17.1...4.17.3)

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 14:18:05 -03:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
93652eabc0 Bump qs and express in /examples/passport-demo (#340)
Bumps [qs](https://github.com/ljharb/qs) to 6.11.0 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `qs` from 6.7.0 to 6.11.0
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.7.0...v6.11.0)

Updates `express` from 4.17.0 to 4.18.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.17.0...4.18.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-type: indirect
- dependency-name: express
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-06 14:12:07 -03:00
Adam McgrathandGitHub 7a9da6e227 Merge pull request #339 from christianliebel/patch-1
Update for express-jwt@7
2022-11-28 09:22:00 +00:00
Christian Liebel 7a78b9eb1e Fix description typos 2022-11-25 14:16:41 +01:00
Christian Liebel 88cfb8cc90 Update for express-jwt@7 2022-11-25 14:16:00 +01:00
crew-securityandGitHub 93c9907e41 [Snyk] Upgrade jose from 4.10.3 to 4.10.4 (#337) 2022-11-19 07:49:23 -03:00
Adam McgrathandGitHub 0363d2627b Merge pull request #335 from auth0/release/v3.0.0 v3.0.0 2022-11-01 16:56:06 +00:00
adamjmcgrath 83f9a03f02 Release v3.0.0 2022-11-01 16:42:41 +00:00
Adam McgrathandGitHub d5f92fb09c Merge pull request #333 from panva/bump-jose 2022-11-01 14:57:16 +00:00
Adam McgrathandGitHub 690416741f Apply suggestions from code review 2022-11-01 14:52:54 +00:00
Adam McgrathandGitHub a5482753f1 Update .circleci/config.yml 2022-11-01 14:42:20 +00:00
Adam McgrathandGitHub 9d0d300e7c Update .circleci/config.yml 2022-11-01 14:41:37 +00:00
Adam McgrathandGitHub 900210d7da Merge branch 'master' into bump-jose 2022-11-01 14:27:15 +00:00
Ewan HarrisandGitHub 4c079c27dd [SDK-3706] Update readme to match new design (#332) 2022-10-25 12:06:44 +02:00
Filip Skokan 112e5b142a [major] bump jose 2022-10-24 21:04:51 +02:00
sre-57-opslevel[bot]GitHubsre-57-opslevel[bot] <113727212+sre-57-opslevel[bot]@users.noreply.github.com>
30ae707e31 OpsLevel repo catalog - upload opslevel.yml (#331)
Upload OpsLevel YAML

Co-authored-by: sre-57-opslevel[bot] <113727212+sre-57-opslevel[bot]@users.noreply.github.com>
2022-10-19 11:45:17 +01:00
Adam McgrathandGitHub 4097f3e085 Merge pull request #330 from auth0/release/v2.1.5
Release v2.1.5
v2.1.5
2022-10-10 15:03:02 +01:00
adamjmcgrath 92d309bb8e Release v2.1.5 2022-10-10 13:26:46 +01:00
Adam McgrathandGitHub 376ce522d7 Merge pull request #322 from auth0/dependabot/npm_and_yarn/examples/passport-demo/passport-0.6.0
Bump passport from 0.4.0 to 0.6.0 in /examples/passport-demo
2022-10-10 13:25:36 +01:00
Adam McgrathandGitHub 7b639dfd15 Merge branch 'master' into dependabot/npm_and_yarn/examples/passport-demo/passport-0.6.0 2022-10-10 13:24:29 +01:00
Adam McgrathandGitHub fceeca8ca5 Merge pull request #329 from AaronMoat/fix-express-jwt-secret-typing
Fix GetVerificationKey typing to include undefined
2022-10-10 13:24:17 +01:00
Aaron MoatandGitHub 381a9634f7 Merge branch 'master' into fix-express-jwt-secret-typing 2022-10-10 17:45:07 +11:00
Aaron Moat a2c302eff6 Fix GetVerificationKey typing to include undefined 2022-10-10 17:42:58 +11:00
Adam McgrathandGitHub a25192f47d Merge branch 'master' into dependabot/npm_and_yarn/examples/passport-demo/passport-0.6.0 2022-10-07 16:48:07 +01:00
Adam McgrathandGitHub f4970b0f7d Merge pull request #321 from auth0/dependabot/npm_and_yarn/passport-0.6.0
Bump passport from 0.4.1 to 0.6.0
2022-10-07 16:47:48 +01:00
Adam McgrathandGitHub 39a410d9b0 Merge branch 'master' into dependabot/npm_and_yarn/passport-0.6.0 2022-10-07 16:39:24 +01:00
Adam McgrathandGitHub 7e9b04b5cd Merge pull request #327 from auth0/adamjmcgrath-patch-2
Update README.md
2022-10-07 16:38:45 +01:00
b3a6dc9924 Update README.md
Co-authored-by: Ewan Harris <[email protected]>
2022-10-07 16:26:29 +01:00
Adam McgrathandGitHub 697578433c Update README.md 2022-10-07 14:13:27 +01:00
8d545f2eb1 [Snyk] Upgrade @types/express from 4.17.13 to 4.17.14 (#326)
fix: upgrade @types/express from 4.17.13 to 4.17.14

Snyk has created this PR to upgrade @types/express from 4.17.13 to 4.17.14.

See this package in npm:
https://www.npmjs.com/package/@types/express

See this project in Snyk:
https://app.snyk.io/org/auth0-sdks/project/be959a98-9654-498d-9e56-dfd8374045a4?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <[email protected]>
2022-10-05 11:37:49 -03:00
cc328c4088 [Snyk] Upgrade @types/jsonwebtoken from 8.5.8 to 8.5.9 (#323)
fix: upgrade @types/jsonwebtoken from 8.5.8 to 8.5.9

Snyk has created this PR to upgrade @types/jsonwebtoken from 8.5.8 to 8.5.9.

See this package in npm:
https://www.npmjs.com/package/@types/jsonwebtoken

See this project in Snyk:
https://app.snyk.io/org/auth0-sdks/project/be959a98-9654-498d-9e56-dfd8374045a4?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <[email protected]>
2022-09-15 11:58:30 -03:00
dependabot[bot]andGitHub b8ade3d790 Bump passport from 0.4.0 to 0.6.0 in /examples/passport-demo
Bumps [passport](https://github.com/jaredhanson/passport) from 0.4.0 to 0.6.0.
- [Release notes](https://github.com/jaredhanson/passport/releases)
- [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaredhanson/passport/compare/v0.4.0...v0.6.0)

---
updated-dependencies:
- dependency-name: passport
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
2022-09-09 13:46:41 +00:00
dependabot[bot]andGitHub 8f3e22928f Bump passport from 0.4.1 to 0.6.0
Bumps [passport](https://github.com/jaredhanson/passport) from 0.4.1 to 0.6.0.
- [Release notes](https://github.com/jaredhanson/passport/releases)
- [Changelog](https://github.com/jaredhanson/passport/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jaredhanson/passport/compare/v0.4.1...v0.6.0)

---
updated-dependencies:
- dependency-name: passport
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
2022-09-09 13:46:38 +00:00
167f98c502 [Snyk] Security upgrade jose from 2.0.5 to 2.0.6 (#320)
fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-JOSE-3018688

Co-authored-by: snyk-bot <[email protected]>
2022-09-09 10:46:11 -03:00
Evan SimsandGitHub de9748247e Update Codecov (#318)
Update config.yml
2022-07-08 20:43:32 -03:00
Evan SimsandGitHub f15ccb70b8 Update .semgrepignore 2022-07-07 12:01:41 -04:00
Evan SimsandGitHub 56b818683c Create .semgrepignore 2022-07-07 12:00:28 -04:00
Evan SimsandGitHub fbef20d2bc Create semgrep.yml 2022-07-05 17:34:48 -04:00
Adam McgrathandGitHub 782bb3c481 Merge pull request #315 from auth0/release/v2.1.4
Release v2.1.4
v2.1.4
2022-06-07 18:55:56 +01:00
adamjmcgrath f8fdffe829 Release v2.1.4 2022-06-07 17:29:11 +01:00
Adam McgrathandGitHub afe706c9a6 Merge pull request #314 from auth0/jsonwebtoken-dep
Type definitions depend on jsonwebtoken
2022-06-07 17:27:22 +01:00
adamjmcgrath f49a0e3481 Type definitions depend on jsonwebtoken 2022-06-07 15:29:10 +01:00
Adam McgrathandGitHub 97c87f1126 Merge pull request #311 from auth0/release/v2.1.3
Release v2.1.3
v2.1.3
2022-05-20 11:39:33 +01:00
adamjmcgrath d2f2060618 Release v2.1.3 2022-05-20 10:50:00 +01:00
Adam McgrathandGitHub 84ba8b6f39 Merge pull request #310 from auth0/fix-express-import
Fix issue with ES Express import
2022-05-20 10:49:17 +01:00
adamjmcgrath f2d4386c45 Fix issue with ES Express import 2022-05-17 12:09:30 +01:00
Adam McgrathandGitHub 668ec147ed Merge pull request #306 from auth0/release/v2.1.2
Release v2.1.2
v2.1.2
2022-05-12 15:25:57 +01:00