[Snyk] Upgrade @inrupt/solid-client-authn-browser from 2.0.0 to 2.1.0 #2390
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @inrupt/solid-client-authn-browser from 2.0.0 to 2.1.0. See this package in npm: https://www.npmjs.com/package/@inrupt/solid-client-authn-browser See this project in Snyk: https://app.snyk.io/org/engineering-CGCiXj96RbVotntN7wcPgV/project/c09833c9-b3e8-43ce-8475-92fafba4f0e2?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @inrupt/solid-client-authn-browser from 2.0.0 to 2.1.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: @inrupt/solid-client-authn-browser
-
2.1.0 - 2024-03-14
- OpenID Providers with multiple JWK in their JWKS are now supported. Thanks to
- Authorization code flow for statically registered clients is now supported. Statically registered
- Fix non-DPoP bound tokens support in browser: a bug in the handling of non-DPoP-bound tokens was
-
2.0.0 - 2023-12-20
- Node 16 is no longer supported. The global
- The
- the
- The
- The
- The UMD build of
- Moved from
from @inrupt/solid-client-authn-browser GitHub release notesNew Feature
node and browser
@ pavol-brunclik-compote for the original contribution.
node
clients previously defaulted to the Client Credentials flow, it is no longer an assumption.
Bugfix
browser
preventing the auth code grant to complete, with a 401 to the OpenId Provider Token Endpoint
observed on redirect after the user authenticated. It is now possible to do
session.login({/*...*/, tokenType: "Bearer"})and get a successful result.Breaking Changes
fetchfunction is used instead of@ inrupt/universal-fetch.This means this library now only works with Node 18 and higher.
Sessionclass no longer extendsEventEmitter. Instead, it exposes aneventsattribute implementingEventEmitter. We do not recommend to useSessioninstance'seventsattribute as an arbitrary events emitter,and encourage users to only use the supported events and documented API.
SessionmethodsonLogin,onLogout,onError,onSessionRestore,onSessionExpirationandonNewRefreshTokenhave been removed. They are replaced by calls to
session.events.on, using the appropriate event name.Sessionconstructor changes:onNewRefreshTokenparameter is no longer supported. Its usage is replaced by callingsession.events.onusing the
EVENTS.NEW_REFRESH_TOKENconstant as a first parameter, and a callback handling the token as asecond parameter.
useEssSessionparameter is no longer supported.getClientAuthenticationWithDependenciesis no longer exported as part of the public API, and is now internal-only.@ inrupt/oidc-client-extis no longer available. Since this is a package only intended to beconsumed by
@ inrupt/solid-client-authn-browser, which doesn't have a UMD build, this change should have noimpact.
Build system changes
rollup-plugin-typescript2to@ rollup/plugin-typescript. Although this should not be a breaking change,upgrading may require extra attention.
Commit messages
Package name: @inrupt/solid-client-authn-browser
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs