Skip to content

Commit 90f394b

Browse files
chyrocchyroc
authored
fix: Upgrade jwt dependent versions to resolve security issues (#31)
1 parent 50854b5 commit 90f394b

File tree

8 files changed

+28
-24
lines changed

8 files changed

+28
-24
lines changed

‎go/device-oauth/go.mod

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,6 @@ module github.com/coze-dev/coze-oauth-quickstart/go/device-oauth
22

33
go 1.18
44

5-
require github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904
5+
require github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949
66

7-
require github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
7+
require github.com/golang-jwt/jwt/v5 v5.2.2 // indirect

‎go/device-oauth/go.sum

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
1-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904 h1:QAV6p8ENsYawllms96qmohmJwZYD3vFVrZRSul5GBjw=
2-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904/go.mod h1:zc7+Lrzh5Lm7BYmqbtjMnV3eoRJpjE05LSqtT+iH+LE=
1+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949 h1:Ca1n0Bx7dlEt0SKwoVO4ekQ2vhLKEif4n99+WKBEn60=
2+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949/go.mod h1:OKwE5NXD7dUhGUtRyFPdBufz1npuNNmEG7yWjv9a5f0=
33
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
4-
github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
5-
github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
4+
github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
5+
github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
6+
github.com/jarcoal/httpmock v1.4.0 h1:BvhqnH0JAYbNudL2GMJKgOHe2CtKlzJ/5rWKyp+hc2k=
67
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
78
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
89
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

‎go/jwt-oauth/go.mod

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,6 @@ module github.com/coze-dev/coze-oauth-quickstart/go/jwt-oauth
22

33
go 1.18
44

5-
require github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904
5+
require github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949
66

7-
require github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
7+
require github.com/golang-jwt/jwt/v5 v5.2.2 // indirect

‎go/jwt-oauth/go.sum

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
1-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904 h1:QAV6p8ENsYawllms96qmohmJwZYD3vFVrZRSul5GBjw=
2-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904/go.mod h1:zc7+Lrzh5Lm7BYmqbtjMnV3eoRJpjE05LSqtT+iH+LE=
1+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949 h1:Ca1n0Bx7dlEt0SKwoVO4ekQ2vhLKEif4n99+WKBEn60=
2+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949/go.mod h1:OKwE5NXD7dUhGUtRyFPdBufz1npuNNmEG7yWjv9a5f0=
33
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
4-
github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
5-
github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
4+
github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
5+
github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
6+
github.com/jarcoal/httpmock v1.4.0 h1:BvhqnH0JAYbNudL2GMJKgOHe2CtKlzJ/5rWKyp+hc2k=
67
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
78
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
89
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

‎go/pkce-oauth/go.mod

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@ module github.com/coze-dev/coze-oauth-quickstart/go/pkce-oauth
33
go 1.18
44

55
require (
6-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904
6+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949
77
github.com/gorilla/sessions v1.2.2
88
)
99

1010
require (
11-
github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
11+
github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
1212
github.com/gorilla/securecookie v1.1.2 // indirect
1313
)

‎go/pkce-oauth/go.sum

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,14 @@
1-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904 h1:QAV6p8ENsYawllms96qmohmJwZYD3vFVrZRSul5GBjw=
2-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904/go.mod h1:zc7+Lrzh5Lm7BYmqbtjMnV3eoRJpjE05LSqtT+iH+LE=
1+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949 h1:Ca1n0Bx7dlEt0SKwoVO4ekQ2vhLKEif4n99+WKBEn60=
2+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949/go.mod h1:OKwE5NXD7dUhGUtRyFPdBufz1npuNNmEG7yWjv9a5f0=
33
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
4-
github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
5-
github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
4+
github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
5+
github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
66
github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
77
github.com/gorilla/securecookie v1.1.2 h1:YCIWL56dvtr73r6715mJs5ZvhtnY73hBvEF8kXD8ePA=
88
github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pwzwo4h3eOamfo=
99
github.com/gorilla/sessions v1.2.2 h1:lqzMYz6bOfvn2WriPUjNByzeXIlVzURcPmgMczkmTjY=
1010
github.com/gorilla/sessions v1.2.2/go.mod h1:ePLdVu+jbEgHH+KWw8I1z2wqd0BAdAQh/8LRvBeoNcQ=
11+
github.com/jarcoal/httpmock v1.4.0 h1:BvhqnH0JAYbNudL2GMJKgOHe2CtKlzJ/5rWKyp+hc2k=
1112
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
1213
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
1314
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

‎go/web-oauth/go.mod

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@ module github.com/coze-dev/coze-oauth-quickstart/go/web-oauth
33
go 1.18
44

55
require (
6-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904
6+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949
77
github.com/gorilla/sessions v1.3.0
88
)
99

1010
require (
11-
github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
11+
github.com/golang-jwt/jwt/v5 v5.2.2 // indirect
1212
github.com/gorilla/securecookie v1.1.2 // indirect
1313
)

‎go/web-oauth/go.sum

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,14 @@
1-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904 h1:QAV6p8ENsYawllms96qmohmJwZYD3vFVrZRSul5GBjw=
2-
github.com/coze-dev/coze-go v0.0.0-20250205074941-5c21d40b5904/go.mod h1:zc7+Lrzh5Lm7BYmqbtjMnV3eoRJpjE05LSqtT+iH+LE=
1+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949 h1:Ca1n0Bx7dlEt0SKwoVO4ekQ2vhLKEif4n99+WKBEn60=
2+
github.com/coze-dev/coze-go v0.0.0-20250620070208-b0cf4ed03949/go.mod h1:OKwE5NXD7dUhGUtRyFPdBufz1npuNNmEG7yWjv9a5f0=
33
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
4-
github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
5-
github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
4+
github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
5+
github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
66
github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
77
github.com/gorilla/securecookie v1.1.2 h1:YCIWL56dvtr73r6715mJs5ZvhtnY73hBvEF8kXD8ePA=
88
github.com/gorilla/securecookie v1.1.2/go.mod h1:NfCASbcHqRSY+3a8tlWJwsQap2VX5pwzwo4h3eOamfo=
99
github.com/gorilla/sessions v1.3.0 h1:XYlkq7KcpOB2ZhHBPv5WpjMIxrQosiZanfoy1HLZFzg=
1010
github.com/gorilla/sessions v1.3.0/go.mod h1:ePLdVu+jbEgHH+KWw8I1z2wqd0BAdAQh/8LRvBeoNcQ=
11+
github.com/jarcoal/httpmock v1.4.0 h1:BvhqnH0JAYbNudL2GMJKgOHe2CtKlzJ/5rWKyp+hc2k=
1112
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
1213
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
1314
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=

0 commit comments

Comments
 (0)