server - package.json - jsonwebtoken. Problem with security.

martinmicunda / ionic-photo-gallery

A hybrid app with authentication that allows registered users view a gallery of photos they have uploaded via the camera phone.

MIT License

174 stars 76 forks source link

server - package.json - jsonwebtoken. Problem with security. #2

Open rpCal opened 8 years ago

rpCal commented 8 years ago

Hi, If you have time you could update package.json on server. Please look at changelog ( https://github.com/auth0/node-jsonwebtoken/blob/v5.0.4/CHANGELOG.md ) -

Important: versions >= 4.2.2 this library are safe to use but we decided to deprecate everything < 5.0.0 to prevent security warnings from library node-jws when doing npm install.

martinmicunda commented 8 years ago

I would like to update this package however I won't have time in near future because I am working on another project right now but if you make a pull request and make sure app work properly I will merge it as it seems there are breaking changes in jwt.verify() function.