[Snyk] Upgrade jsonwebtoken from 0.4.0 to 9.0.2

[jake-shobin]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade jsonwebtoken from 0.4.0 to 9.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 77 versions ahead of your current version.
• The recommended version was released 6 months ago, on 2023-08-30.

Release notes

Package name: jsonwebtoken

• 9.0.2 - 2023-08-30
  

  Release 9.0.2 (#935)

• 9.0.1 - 2023-07-05
  

  Updating package version to 9.0.1 (#920)

• 9.0.0 - 2022-12-21
  

  • Check if node version supports asymmetricKeyDetails

  • Validate algorithms for ec key type

  • Rename variable

  • Rename function

  • Add early return for symmetric keys

  • Validate algorithm for RSA key type

  • Validate algorithm for RSA-PSS key type

  • Check key types for EdDSA algorithm

  • Rename function

  • Move validateKey function to module

  • Convert arrow to function notation

  • Validate key in verify function

  • Simplify if

  • Convert if to switch..case

  • Guard against empty key in validation

  • Remove empty line

  • Add lib to check modulus length

  • Add modulus length checks

  • Validate mgf1HashAlgorithm and saltLength

  • Check node version before using key details API

  • Use built-in modulus length getter

  • Fix Node version validations

  • Remove duplicate validateKey

  • Add periods to error messages

  • Fix validation in verify function

  • Make asymmetric key validation the latest validation step

  • Change key curve validation

  • Remove support for ES256K

  • Fix old test that was using wrong key types to sign tokens

  • Enable RSA-PSS for old Node versions

  • Add specific RSA-PSS validations on Node 16 LTS+

  • Improve error message

  • Simplify key validation code

  • Fix typo

  • Improve error message

  • Change var to const in test

  • Change const to let to avoid reassigning problem

  • Improve error message

  • Test incorrect private key type

  • Rename invalid to unsupported

  • Test verifying of jwt token with unsupported key

  • Test invalid private key type

  • Change order of object parameters

  • Move validation test to separate file

  • Move all validation tests to separate file

  • Add prime256v1 ec key

  • Remove modulus length check

  • WIP: Add EC key validation tests

  • Fix node version checks

  • Fix error message check on test

  • Add successful tests for EC curve check

  • Remove only from describe

  • Remove only

  • Remove duplicate block of code

  • Move variable to a different scope and make it const

  • Convert allowed curves to object for faster lookup

  • Rename variable

  • Change variable assignment order

  • Remove unused object properties

  • Test RSA-PSS happy path and wrong length

  • Add missing tests

  • Pass validation if no algorithm has been provided

  • Test validation of invalid salt length

  • Test error when signing token with invalid key

  • Change var to const/let in verify tests

  • Test verifying token with invalid key

  • Improve test error messages

  • Add parameter to skip private key validation

  • Replace DSA key with a 4096 bit long key

  • Test allowInvalidPrivateKeys in key signing

  • Improve test message

  • Rename variable

  • Add key validation flag tests

  • Fix variable name in Readme

  • Change private to public dsa key in verify

  • Rename flag

  • Run EC validation tests conditionally

  • Fix tests in old node versions

  • Ignore block of code from test coverage

  • Separate EC validations tests into two different ones

  • Add comment

  • Wrap switch in if instead of having an early return

  • Remove unsupported algorithms from asymmetric key validation

  • Rename option to allowInvalidAsymmetricKeyTypes and improve Readme

  • 9.0.0

  • adding migration notes to readme

  • adding changelog for version 9.0.0

  Co-authored-by: julienwoll julien.wollscheid@auth0.com

• 8.5.1 - 2019-03-18
  

  8.5.1

• 8.5.0 - 2019-02-20
  

  8.5.0

• 8.4.0 - 2018-11-14
  

  8.4.0

• 8.3.0 - 2018-06-11
  

  8.3.0

• 8.2.2 - 2018-05-30
  

  8.2.2

• 8.2.1 - 2018-04-05
  

  8.2.1

• 8.2.0 - 2018-03-02
  

  8.2.0

• 8.1.1 - 2018-01-22
• 8.1.0 - 2017-10-09
• 8.0.1 - 2017-09-12
• 8.0.0 - 2017-09-06
• 7.4.3 - 2017-08-17
• 7.4.2 - 2017-08-04
• 7.4.1 - 2017-05-17
• 7.4.0 - 2017-04-24
• 7.3.0 - 2017-02-13
• 7.2.1 - 2016-12-07
• 7.2.0 - 2016-12-06
• 7.1.10 - 2016-12-06
• 7.1.9 - 2016-08-11
• 7.1.8 - 2016-08-10
• 7.1.7 - 2016-07-29
• 7.1.6 - 2016-07-15
• 7.1.5 - 2016-07-15
• 7.1.3 - 2016-07-12
• 7.1.1 - 2016-07-12
• 7.1.0 - 2016-07-12
• 7.0.1 - 2016-06-14
• 7.0.0 - 2016-05-19
• 6.2.0 - 2016-04-29
• 6.1.2 - 2016-04-29
• 6.1.1 - 2016-04-28
• 6.1.0 - 2016-04-27
• 6.0.1 - 2016-04-27
• 6.0.0 - 2016-04-27
• 5.7.0 - 2016-02-16
• 5.6.2 - 2016-02-16
• 5.6.0 - 2016-02-16
• 5.5.4 - 2016-01-04
• 5.5.3 - 2016-01-04
• 5.5.2 - 2016-01-04
• 5.5.1 - 2016-01-04
• 5.5.0 - 2015-12-28
• 5.4.1 - 2015-10-26
• 5.4.0 - 2015-10-02
• 5.3.1 - 2015-10-02
• 5.2.0 - 2015-10-02
• 5.1.0 - 2015-10-02
• 5.0.5 - 2015-08-19
• 5.0.4 - 2015-07-15
• 5.0.3 - 2015-07-15
• 5.0.2 - 2015-06-15
• 5.0.1 - 2015-05-15
• 5.0.0 - 2015-04-10
• 4.2.2 - 2015-03-26
• 4.2.1 - 2015-03-17
• 4.2.0 - 2015-03-16
• 4.1.0 - 2015-03-10
• 4.0.0 - 2015-03-06
• 3.2.2 - 2015-01-15
• 3.2.1 - 2015-01-08
• 3.2.0 - 2014-12-29
• 3.1.1 - 2014-12-29
• 3.1.0 - 2014-12-29
• 3.0.0 - 2014-12-29
• 2.0.0 - 2014-12-20
• 1.3.0 - 2014-12-10
• 1.2.0 - 2014-11-26
• 1.1.2 - 2014-09-15
• 1.1.1 - 2014-09-05
• 1.1.0 - 2014-08-23
• 1.0.2 - 2014-08-23
• 1.0.0 - 2014-08-23
• 0.4.1 - 2014-07-14
• 0.4.0 - 2014-05-03

from jsonwebtoken GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs