update jwt library for CVE-2020-26160

ntbosscher · Jul 26, 2021 · d9601f8 · d9601f8
1 parent 0f78a55
commit d9601f8
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 3 deletions.
diff --git a/auth/httpauth/main.go b/auth/httpauth/main.go
@@ -3,7 +3,7 @@ package httpauth
 import (
 	"context"
 	"errors"
-	"github.com/dgrijalva/jwt-go"
+	"github.com/golang-jwt/jwt"
 	"github.com/ntbosscher/gobase/auth"
 	"github.com/ntbosscher/gobase/auth/httpauth/oauth"
 	"github.com/ntbosscher/gobase/env"

diff --git a/auth/httpauth/main_test.go b/auth/httpauth/main_test.go
@@ -1,7 +1,7 @@
 package httpauth
 
 import (
-	"github.com/dgrijalva/jwt-go"
+	"github.com/golang-jwt/jwt"
 	"github.com/ntbosscher/gobase/auth"
 	"testing"
 	"time"

diff --git a/auth/main.go b/auth/main.go
@@ -2,8 +2,8 @@ package auth
 
 import (
 	"context"
-	"github.com/dgrijalva/jwt-go"
 	"github.com/gobuffalo/nulls"
+	"github.com/golang-jwt/jwt"
 	"math"
 	"unsafe"
 )

diff --git a/go.mod b/go.mod
@@ -12,6 +12,7 @@ require (
 	github.com/gobuffalo/nulls v0.4.0
 	github.com/gocarina/gocsv v0.0.0-20201103164230-b291445e0dd2
 	github.com/gofrs/uuid v3.2.0+incompatible
+	github.com/golang-jwt/jwt v3.2.1+incompatible
 	github.com/gorilla/mux v1.7.4
 	github.com/gorilla/sessions v1.1.1
 	github.com/gorilla/websocket v1.4.2

diff --git a/go.sum b/go.sum
@@ -126,6 +126,9 @@ github.com/gogo/googleapis v1.1.0/go.mod h1:gf4bu3Q80BeJ6H1S1vYPm8/ELATdvryBaNFG
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
+github.com/golang-jwt/jwt v1.0.2 h1:Nj1npK0K5RnXGo1SxoOixRGAehIZ2326eXuca9gX9A4=
+github.com/golang-jwt/jwt v3.2.1+incompatible h1:73Z+4BJcrTC+KczS6WvTPvRGOp1WmfEP4Q1lOd9Z/+c=
+github.com/golang-jwt/jwt v3.2.1+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20160516000752-02826c3e7903/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=