Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates the hashicorp/cap library to v0.1.0 for verification key caching fix #172

Merged
merged 3 commits into from
Jun 7, 2021

Conversation

austingebauer
Copy link
Contributor

@austingebauer austingebauer commented Jun 4, 2021

Overview

This PR updates the hashicorp/cap library to v0.1.0 to bring in a verification key caching change in the underlying coreos/go-oidc library. The library now follows a strategy that is more aligned with the OIDC spec.

For more details, see the following issues/PRs:

Testing

All existing tests are passing after this update. I also manually tested that JWT verification works as expected.

@austingebauer austingebauer added this to the 1.7.3 milestone Jun 4, 2021
@calvn
Copy link
Contributor

calvn commented Jun 4, 2021

Can you run go mod tidy to see if it removes the indirect deps from go.mod?

@austingebauer
Copy link
Contributor Author

@calvn - Whoops, forgot to run that. Done in 2b1995f.

@austingebauer austingebauer merged commit 94e9eff into master Jun 7, 2021
@austingebauer austingebauer deleted the update-cap-lib branch June 7, 2021 16:29
@austingebauer austingebauer changed the title Updates the hashicorp/cap library to v0.1.0 for verification key caching issue Updates the hashicorp/cap library to v0.1.0 for verification key caching fix Jun 7, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants