search

mikenicholson / passport-jwt

Passport authentication using JSON Web Tokens
MIT License
1.96k stars 213 forks source link

jsonwebtoken update to ^9.0.0 in passport-jwt@4.0.1 was a breaking change #250

Open flipace opened 1 year ago

flipace commented 1 year ago

Hi!

We just tried to update to v4.0.1 but it turned out to be a breaking change due to jsonwebtoken 9.0.0 containing various breaking changes: https://github.com/auth0/node-jsonwebtoken/wiki/Migration-Notes:-v8-to-v9

Mentioning it here since others might stumble upon the same issue. Maybe passport-jwt 4.0.1 should have been a 5.0.0 😅 ?

Anyhow - thanks for updating and addressing the vulnerability.

megagreg72 commented 1 year ago

thanks for the heads-up!