airmap-auth - npm Package Compare versions

Comparing version 2.0.0 to 2.0.1

API.md

@@ -60,3 +60,2 @@ ## Modules
 | options.language | <code>string</code> | Optional string. Language code for UI text. Defaults to `en`. |
-| options.logo | <code>string</code> | Optional string. Defaults to AirMap logo. |
 | options.onAuthenticated | <code>function</code> | Optional function. Function called when Auth Module successfully authenticates the user. Parameter passed to function is the resulting Authorization object. |
@@ -63,0 +62,0 @@

bower.json

@@ -26,3 +26,3 @@ {
   ],
-  "version": "2.0.0"
+  "version": "2.0.1"
 }

CHANGELOG.md

@@ -5,2 +5,12 @@ # Change Log
 
+<a name="2.0.1"></a>
+## [2.0.1](https://github.com/airmap/js-auth/compare/v2.0.0...v2.0.1) (2018-05-22)
+
+
+### Bug Fixes
+
+* update jsonwebtoken due to security reasons ([e798cc0](https://github.com/airmap/js-auth/commit/e798cc0))
+
+
+
 <a name="2.0.0"></a>
@@ -7,0 +17,0 @@ # [2.0.0](https://github.com/airmap/js-auth/compare/v1.5.2...v2.0.0) (2018-03-23)

dist/AirMapAuth.js

@@ -34,3 +34,2 @@ 'use strict';
      * @param {string} options.language Optional string. Language code for UI text. Defaults to `en`.
-     * @param {string} options.logo Optional string. Defaults to AirMap logo.
      * @param {function} options.onAuthenticated Optional function. Function called when Auth Module successfully authenticates the user. Parameter passed to function is the resulting Authorization object.
@@ -261,3 +260,3 @@ * @returns {AirMapAuth}
     language: 'en',
-    logo: 'https://cdn.airmap.io/img/login-logo.png',
+    logo: 'us',
     onAuthenticated: function onAuthenticated(authResult) {
@@ -264,0 +263,0 @@ return null;

examples/index.js

@@ -6,9 +6,8 @@ // Load the AirMapAuth constructor
 // config is an object provided to the the AirMapAuth constructor
+const config = {
+    // config settings from AirMap Developer Dashboard
+}
 // client_id: from the AirMap Developer Portal (https://dashboard.airmap.io/developer)
 // callback_url: your callback url needs to be saved on the AirMap Developer Portal (https://dashboard.airmap.io/developer)
-// const config = {
-//     // config settings from AirMap Developer Dashboard
-// }
 // autoLaunch: Optional boolean. Will check on pageload if user is authenticated. If not authenticated, the auth window will launch. Defaults to `false`.
-// logo: Optional string. Defaults to AirMap logo.
 // language: Optional string. Language code for UI text. Defaults to `en`.
@@ -18,3 +17,2 @@ // Additional options for AirMap Auth Module
     autoLaunch: false,
-    logo: 'https://cdn.airmap.io/img/login-logo.png',
     language: 'en'
@@ -21,0 +19,0 @@ }

package.json

 {
   "name": "airmap-auth",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Authenticate users with AirMap",
@@ -39,3 +39,3 @@ "author": "AirMap, Inc. <[e-mail]> (https://airmap.com)",
     "auth0-js": "^9.3.2",
-    "jsonwebtoken": "^7.1.9"
+    "jsonwebtoken": "^8.2.1"
   },
@@ -42,0 +42,0 @@ "devDependencies": {

test/shared.js

@@ -31,3 +31,3 @@ 'use strict'
     language: 'en',
-    logo: 'https://cdn.airmap.io/img/login-logo.png',
+    logo: 'us',
     onAuthenticated: (authResult) => null
@@ -34,0 +34,0 @@ }

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

521406

decreased by-20.9%

Lines of code

2398

decreased by-18.18%

Dependency changes

• + Addedjsonwebtoken@8.5.1(transitive)

• + Addedlodash.includes@4.3.0(transitive)

• + Addedlodash.isboolean@3.0.3(transitive)

• + Addedlodash.isinteger@4.0.4(transitive)

• + Addedlodash.isnumber@3.0.3(transitive)

• + Addedlodash.isplainobject@4.0.6(transitive)

• + Addedlodash.isstring@4.0.1(transitive)

• + Addedsemver@5.7.2(transitive)

• - Removedhoek@2.16.3(transitive)

• - Removedisemail@1.2.0(transitive)

• - Removedjoi@6.10.1(transitive)

• - Removedjsonwebtoken@7.4.3(transitive)

• - Removedmoment@2.30.1(transitive)

• - Removedtopo@1.1.0(transitive)

• - Removedxtend@4.0.2(transitive)

• Updatedjsonwebtoken@^8.2.1