Skip to content

Commit 9db49a1

Browse files
authored
Update JWT library to github.com/golang-jwt/jwt (#1568)
- The former repo has been migrated (see dgrijalva/jwt-go#462). - Dependabot alerted on a security issue in the old version (GHSA-w73w-5m7g-f7qc). This issue should not effect Fleet due to no use of `aud` claims.
1 parent ccd5298 commit 9db49a1

File tree

3 files changed

+4
-138
lines changed

3 files changed

+4
-138
lines changed

ee/server/licensing/licensing.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@ import (
77
"encoding/pem"
88
"time"
99

10-
"github.com/dgrijalva/jwt-go"
1110
"github.com/fleetdm/fleet/v4/server/fleet"
11+
"github.com/golang-jwt/jwt/v4"
1212
"github.com/pkg/errors"
1313
)
1414

go.mod

+1-3
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,6 @@ require (
1717
github.com/briandowns/spinner v0.0.0-20170614154858-48dbb65d7bd5
1818
github.com/cenkalti/backoff/v4 v4.0.0
1919
github.com/davecgh/go-spew v1.1.1
20-
github.com/dgrijalva/jwt-go v3.2.0+incompatible
2120
github.com/dnaeon/go-vcr/v2 v2.0.1
2221
github.com/e-dard/netbug v0.0.0-20151029172837-e64d308a0b20
2322
github.com/elazarl/go-bindata-assetfs v1.0.0
@@ -29,14 +28,14 @@ require (
2928
github.com/go-kit/kit v0.9.0
3029
github.com/go-logfmt/logfmt v0.5.0 // indirect
3130
github.com/go-sql-driver/mysql v1.5.0
31+
github.com/golang-jwt/jwt/v4 v4.0.0
3232
github.com/gomodule/redigo v1.8.4
3333
github.com/google/go-cmp v0.5.6
3434
github.com/google/go-github/v37 v37.0.0
3535
github.com/google/uuid v1.1.2
3636
github.com/gorilla/mux v1.8.0
3737
github.com/gorilla/websocket v1.4.2
3838
github.com/gosuri/uilive v0.0.4
39-
github.com/groob/mockimpl v0.0.0-20170306012045-dfa944a2a940 // indirect
4039
github.com/igm/sockjs-go/v3 v3.0.0
4140
github.com/jmoiron/sqlx v1.2.0
4241
github.com/jonboulle/clockwork v0.2.2 // indirect
@@ -50,7 +49,6 @@ require (
5049
github.com/mna/redisc v1.2.1
5150
github.com/olekukonko/tablewriter v0.0.5
5251
github.com/open-policy-agent/opa v0.24.0
53-
github.com/patrickmn/sortutil v0.0.0-20120526081524-abeda66eb583
5452
github.com/pkg/errors v0.9.1
5553
github.com/prometheus/client_golang v0.9.3
5654
github.com/prometheus/client_model v0.2.0 // indirect

0 commit comments

Comments
 (0)