Open SlyDave opened 1 year ago
passport v11 and oauth2-server v8 both updated to support jtw 5.0 which removed the method being called. lighthouse-graphql-passport-auth has support for passport v11, even though it specifies jtw 4.0 so we've got an old-fashioned dependency break :D
$ composer depends lcobucci/jwt
laravel/passport v11.8.8 requires lcobucci/jwt (^4.3|^5.0)
league/oauth2-server 8.5.3 requires lcobucci/jwt (^4.3 || ^5.0)
roave/security-advisories dev-master conflicts lcobucci/jwt (>=3.4,<3.4.6|>=4,<4.0.4|>=4.1,<4.1.5)
│ ├──laravel/passport v11.8.8 (requires league/oauth2-server ^8.5.3)
│ │ ├──goseadigital/workrest dev-develop (requires laravel/passport ^v11.8.0)
│ │ └──joselfonseca/lighthouse-graphql-passport-auth 9.0.0 (requires laravel/passport ^9.0 || ^10.0 || ^11.0)
│ │ └──[REDACTED] dev-develop (requires joselfonseca/lighthouse-graphql-passport-auth 9.0.0)
│ ├──league/oauth2-server 8.5.3 (replaces league/oauth2server *)
│ │ └──league/oauth2-server 8.5.3 (replaces league/oauth2server *) (circular dependency aborted here)
│ ├──league/oauth2-server 8.5.3 (replaces lncd/oauth2 *)
│ │ └──league/oauth2-server 8.5.3 (replaces lncd/oauth2 *) (circular dependency aborted here)
│ ├──league/oauth2-server 8.5.3 (replaces league/oauth2server *) (circular dependency aborted here)
│ ├──league/oauth2-server 8.5.3 (replaces lncd/oauth2 *) (circular dependency aborted here)
A quick for for this was committed in https://github.com/joselfonseca/lighthouse-graphql-passport-auth/pull/166 - This buys some time. but doesn't resolve the underlying issue
Looks like something has changed somewhere? RefreshToken is crashing out with an error because it's trying to call
forUnsecuredSigner()
which no longer appears to exist in the JWT package being used.Found some notes about it in the JWT docs: https://lcobucci-jwt.readthedocs.io/en/stable/upgrading/#removal-of-none-algorithm
Appears to be due to the none-algorithm being removed,