search

auth0 / express-jwt

connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes
MIT License
4.48k stars 442 forks source link

Latest tag on npm registry downgraded from v8 to v7 #345

Closed gom59 closed 3 weeks ago

gom59 commented 3 weeks ago

Description

On my dockerized nodejs app, when I do npm outdated

I get :

Package Current Wanted Latest Location Depended by express-jwt 8.4.1 8.4.1 7.7.8 node_modules/express-jwt app

I have been on 8.4.1 for a while... was there a mistake in the last release?

npm info also points to 7.7.8:

npm info express-jwt

express-jwt@7.7.8 | MIT | deps: 3 | versions: 71 JWT authentication middleware. https://github.com/auth0/express-jwt#readme

keywords: auth, authn, authentication, authz, authorization, http, jwt, token, oauth, express

dist .tarball: https://registry.npmjs.org/express-jwt/-/express-jwt-7.7.8.tgz .shasum: b3a7741a89859b198b22bea04d97a96452a68b91 .integrity: sha512-M/n6aX0LhhtX7OEE1OATRTlxzb1OGW4nlx/knL1BZBk1ZyKxannE7TWwGMD+KxoCU9vqolP9+NPCIlgXiQJXTw== .unpackedSize: 25.4 kB

dependencies: @types/jsonwebtoken: ^8.5.8 express-unless: ^2.1.3 jsonwebtoken: ^9.0.2

maintainers:

dist-tags: latest: 7.7.8

published 2 days ago by jfromaniello jfromaniello@gmail.com

Environment

I am running in the following Docker environment: FROM node:20.8.1-alpine3.18 AS base RUN npm install -g npm@10.1.0

mirkonasato commented 3 weeks ago

I'd suggest editing the title of this issue to e.g. "Latest tag on npm registry downgraded from v8 to v7" to make it clearer.

I doubt it was intentional to make v7.x the latest 2 years after v8 was released: https://www.npmjs.com/package/express-jwt?activeTab=versions

jfromaniello commented 3 weeks ago

@mirkonasato is right, it was not intentionally. I published a patch on the v7 major and forgot that npm automatically set latest now.

Thanks for the heads up. It has been fixed.

gom59 commented 3 weeks ago

Perfect, thank you!