oauth2-mock-server - npm Package Compare versions

Comparing version 5.0.0 to 5.0.1

CHANGELOG.md

@@ -7,2 +7,9 @@ # Changelog
 
+## [5.0.1](https://github.com/axa-group/oauth2-mock-server/compare/v5.0.0...v5.0.1) — 2022-10-04
+
+### Security
+
+- Update dependencies to fix:
+  - [CVE-2022-36083](https://github.com/panva/jose/security/advisories/GHSA-jv3g-j58f-9mq9)
+
 ## [5.0.0](https://github.com/axa-group/oauth2-mock-server/compare/v4.3.2...v5.0.0) — 2022-06-27
@@ -9,0 +16,0 @@

package.json

 {
   "name": "oauth2-mock-server",
-  "version": "5.0.0",
+  "version": "5.0.1",
   "description": "OAuth 2 mock server",
@@ -57,5 +57,5 @@ "keywords": [
     "express": "^4.18.1",
-    "jose": "^4.8.1",
+    "jose": "^4.10.0",
     "lodash.isplainobject": "^4.0.6",
-    "uuid": "^8.3.2"
+    "uuid": "^9.0.0"
   },
@@ -65,24 +65,24 @@ "devDependencies": {
     "@types/cors": "^2.8.12",
-    "@types/express": "^4.17.13",
-    "@types/jest": "^28.1.3",
+    "@types/express": "^4.17.14",
+    "@types/jest": "^29.1.1",
     "@types/lodash.isplainobject": "^4.0.7",
-    "@types/node": "^14.18.21",
+    "@types/node": "^14.18.31",
     "@types/supertest": "^2.0.12",
     "@types/uuid": "^8.3.4",
-    "@typescript-eslint/eslint-plugin": "^5.29.0",
-    "@typescript-eslint/parser": "^5.29.0",
-    "eslint": "^8.18.0",
+    "@typescript-eslint/eslint-plugin": "^5.38.1",
+    "@typescript-eslint/parser": "^5.38.1",
+    "eslint": "^8.24.0",
     "eslint-config-prettier": "^8.5.0",
     "eslint-plugin-import": "^2.26.0",
-    "eslint-plugin-jest": "^26.5.3",
-    "eslint-plugin-jsdoc": "^39.3.3",
-    "eslint-plugin-prettier": "^4.0.0",
-    "jest": "^28.1.1",
-    "jest-junit": "^14.0.0",
+    "eslint-plugin-jest": "^27.0.4",
+    "eslint-plugin-jsdoc": "^39.3.6",
+    "eslint-plugin-prettier": "^4.2.1",
+    "jest": "^29.1.2",
+    "jest-junit": "^14.0.1",
     "prettier": "^2.7.1",
     "rimraf": "^3.0.2",
-    "supertest": "^6.2.3",
-    "ts-jest": "^28.0.5",
-    "ts-node": "^10.8.1",
-    "typescript": "^4.7.4"
+    "supertest": "^6.2.4",
+    "ts-jest": "^29.0.3",
+    "ts-node": "^10.9.1",
+    "typescript": "^4.8.4"
   },
@@ -89,0 +89,0 @@ "resolutions": {

README.md

@@ -8,7 +8,7 @@ # `oauth2-mock-server`
 
-When developing an application that exposes or consumes APIs that are secured with an OAuth 2 authorization scheme, a mechanism for issuing access tokens is needed. Frequently, a developer needs to create custom code that fakes the creation of tokens for testing purposes, and these tokens cannot be properly verified, since there is no actual entity issuing those tokens.
+When developing an application that exposes or consumes APIs that are secured with an [OAuth 2](https://oauth.net/2/) authorization scheme, a mechanism for issuing access tokens is needed. Frequently, a developer needs to create custom code that fakes the creation of tokens for testing purposes, and these tokens cannot be properly verified, since there is no actual entity issuing those tokens.
 
 The purpose of this package is to provide an easily configurable OAuth 2 server, that can be set up and teared down at will, and can be programmatically run while performing automated tests.
 
-> **Warning:** This tool is _not_ intended to be used as an actual OAuth 2 server. It lacks many features that would be required in a proper implementation.
+> **Warning:** This tool is _not_ intended to be used as an actual production grade OAuth 2 server. It lacks many features that would be required in a proper implementation.
 
@@ -108,3 +108,3 @@ ## Development prerequisites
   // Modify the expiration time on next token produced
-  service.once('beforeTokenSigning', (token, _req) => {
+  service.once('beforeTokenSigning', (token, req) => {
     const timestamp = Math.floor(Date.now() / 1000);
@@ -111,0 +111,0 @@ token.payload.exp = timestamp + 400;

No alert changes

Improved metrics

Total package byte prevSize

66454

increased by0.43%

Dependency changes

• + Addeduuid@9.0.1(transitive)

• - Removeduuid@8.3.2(transitive)

• Updatedjose@^4.10.0

• Updateduuid@^9.0.0