[Snyk] Upgrade oauth4webapi from 2.10.3 to 2.12.0

[psturc]

Snyk has created this PR to upgrade oauth4webapi from 2.10.3 to 2.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.

• The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-7361793	761	Proof of Concept
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	761	No Known Exploit
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	761	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	761	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	761	Proof of Concept
	Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	761	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	761	No Known Exploit
	Cross-site Scripting SNYK-JS-EXPRESS-7926867	761	No Known Exploit
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	761	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	761	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	761	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	761	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-WEBPACK-7840298	761	Proof of Concept
	Cross-site Scripting SNYK-JS-SEND-7926862	761	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	761	No Known Exploit

Release notes

Package name: oauth4webapi

• 2.12.0 - 2024-08-19
  

  Features

  • graduate jwksCache to stable API (0e0e1d2)

  Documentation

  • move clockSkew and clockTolerance docs to the symbol (3b5d2ea)
  • update clockSkew and clockTolerance docs (c97313a)
• 2.11.1 - 2024-06-20
  

  Fixes

  • allow ID Token auth_time to be present even if client.require_auth_time is false (caa9ab3)
• 2.11.0 - 2024-06-19
  

  Features

  • add experimental support for edge compute runtimes JWKS caching (15b7aff)

  Refactor

  • update maxAge option type check error message (7fe3454)

  Documentation

  • clarify documentation is more an API Reference (c96c8e0)
  • update example import (651e8ea)
  • updates for readability and consistency (b1b8b7d)
• 2.10.4 - 2024-03-29
  

  Refactor

  • types: add explicit type to all exported functions (76e8d19)
  • types: add explicit type to all exported symbols (c66c595)
  • types: protectedResourceRequest method argument is just a string (a15d76c)

  Documentation

  • mention RFC 6750 in validateJwtAccessToken (f61b68e), closes #115
• 2.10.3 - 2024-02-07
  

  Refactor

  • make protectedResourceRequest headers argument optional (bcbc872)

  Documentation

  • update all examples (cdcbbde)

from oauth4webapi GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs