OpenCHAMI / ochami / 39478521374

93%

push

github

fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4 (#162)

* fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4

* fix(deps): complete jwx v4 migration

Migrate production and test imports to jwx v4.5.0, update JWT error
matching to struct values, and remove v3 and its unused dependencies.
Preserve local time validation and original bearer-token forwarding;
services remain responsible for signature verification.

Add regression tests for optional time claims, future issued-at
values, duplicate claims, expiry warnings, and unchanged token values.

The original dependency update left imports on v3, so go mod tidy
removed the unused v4 requirement and failed CI's module check.
V4 rejects duplicate claim names that v3 accepted.

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>

---------

Signed-off-by: Devon Bautista <17506592+synackd@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Devon Bautista <17506592+synackd@users.noreply.github.com>

4 of 4 new or added lines in 1 file covered. (100.0%)

12933 of 13974 relevant lines covered (92.55%)

540.57 hits per line