Example of integration with React and Webpack (Webpack Encore) for universal (isomorphic) React rendering, using Limenius/ReactBundle and Limenius/LiformBundle
MIT License
337
stars
77
forks
source link
Bump lexik/jwt-authentication-bundle from 2.6.4 to 2.10.7 #88
CVE 2021-21424 - a175d6dab9 - Prevent user enumeration (@chalasr)
v2.10.6
CHANGELOG
a759036 - bug #827 Use named constructor for lcobucci/jwt Ecdsa signers (chalasr)
c765af7 - bug #826 Fix creating tokens when iat is already set in the payload (chalasr)
fe81b99 - bug #804 Fix ability to set extra standard claims in the input payload (bis) (chalasr)
9b921ed - bug #807 Fix compatibility with locbucci/jwt 3.2 (chalasr)
v2.10.2
CHANGELOG
556253d - bug #796 Set Token on ExpiredTokenException (AdrienBr)
e92a283 - bug #801 Fix ability to set extra standard claims in the input payload (chalasr)
v2.10.1
CHANGELOG
4d22398 - bug #797 Fix support for lcobucci/jwt v3.4 and 4.0 (@chalasr)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Limenius/symfony-react-sandbox/network/alerts).
Bumps lexik/jwt-authentication-bundle from 2.6.4 to 2.10.7.
Release notes
Sourced from lexik/jwt-authentication-bundle's releases.
... (truncated)
Changelog
Sourced from lexik/jwt-authentication-bundle's changelog.
... (truncated)
Commits
79ba5afUpdate CHANGELOG for v2.10.7a175d6dPrevent user enumerationdc472ddUpdate CHANGELOG for v2.10.6a759036bug #827 Use named constructor for lcobucci/jwt Ecdsa signers (chalasr)c765af7bug #826 Fix creating tokens when iat is already set in the payload (chalasr)82b64a2Use named constructor for lcobucci/jwt Ecdsa signersdee98cdFix creating tokens when iat is already set in the payloadf6c0d9aUpdate CHANGELOG for v2.10.59c29534bug #815 Fix compatibility for lcobucci/jwt v3.x (bis) (chalasr)5e127cdFix compatibility for lcobucci/jwt v3.xDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Limenius/symfony-react-sandbox/network/alerts).