search

okta / okta-auth-js

The official js wrapper around Okta's auth API
Other
437 stars 255 forks source link

Package uses a deprecated feature that is being reported as an issue in my Application. #1516

Open trv-nmontele opened 1 month ago

trv-nmontele commented 1 month ago

Describe the bug

okta-auth-js has a transitive dependency on 'unload' (direct dependency of broadcast-channel@5.3.0). This is being logged as an issue when running in the Chrome browser.

https://chromestatus.com/feature/5579556305502208

Reproduction Steps?

SDK Versions

System: OS: Windows 10 10.0.19045 CPU: (20) x64 12th Gen Intel(R) Core(TM) i7-12800H Memory: 49.68 GB / 63.71 GB Binaries: Node: 18.16.0 - C:\Program Files\nodejs\node.EXE npm: 9.5.1 - C:\Program Files\nodejs\npm.CMD Browsers: Edge: Chromium (123.0.2420.97) Internet Explorer: 11.0.19041.3636 npmPackages: @okta/okta-auth-js: ^7.6.0 => 7.6.0 @okta/okta-react: ^6.7.0 => 6.7.0

Additional Information?

Output from above when showing SDK versions doesn't mention the Chrome browser I am using. Using Google Chrome Version 124.0.6367.119 (Official Build) (64-bit)

jaredperreault-okta commented 1 month ago

Seems like they are using this event for iframes: https://github.com/pubkey/unload/blob/master/src/browser.js#L37

I'd report this issue, but their repo has issues disabled