Giter Site home page Giter Site logo

videsk / jwt-webauth Goto Github PK

View Code? Open in Web Editor NEW
7.0 3.0 2.0 2.41 MB

A browser JWT as a "session" with expiration observer and server-side validation, zero dependencies.

Home Page: https://open.videsk.io

License: GNU Lesser General Public License v2.1

JavaScript 99.16% HTML 0.84%
jwt expiration expiration-checker sessionstorage localstorage handler webauth refresh-tokens interceptors storage

jwt-webauth's People

Contributors

matiaslopezd avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar

jwt-webauth's Issues

[DepShield] (CVSS 7.5) Vulnerability due to usage of ssri:6.0.1

Vulnerabilities

DepShield reports that this application's usage of ssri:6.0.1 results in the following vulnerability(s):


Occurrences

ssri:6.0.1 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ terser-webpack-plugin:1.4.5
              └─ cacache:12.0.2
                    └─ ssri:6.0.1

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.5) Vulnerability due to usage of kind-of:6.0.2

Vulnerabilities

DepShield reports that this application's usage of kind-of:6.0.2 results in the following vulnerability(s):


Occurrences

kind-of:6.0.2 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ micromatch:3.1.10
              └─ braces:2.3.2
                    └─ snapdragon-node:2.1.1
                          └─ define-property:1.0.0
                                └─ is-descriptor:1.0.2
                                      └─ kind-of:6.0.2
                                      └─ is-accessor-descriptor:1.0.0
                                            └─ kind-of:6.0.2
                                      └─ is-data-descriptor:1.0.0
                                            └─ kind-of:6.0.2
              └─ define-property:2.0.2
                    └─ is-descriptor:1.0.2
                          └─ is-accessor-descriptor:1.0.0
                                └─ kind-of:6.0.2
                          └─ is-data-descriptor:1.0.0
                                └─ kind-of:6.0.2
                          └─ kind-of:6.0.2
              └─ extglob:2.0.4
                    └─ define-property:1.0.0
                          └─ is-descriptor:1.0.2
                                └─ is-accessor-descriptor:1.0.0
                                      └─ kind-of:6.0.2
                                └─ is-data-descriptor:1.0.0
                                      └─ kind-of:6.0.2
                                └─ kind-of:6.0.2
              └─ kind-of:6.0.2
              └─ nanomatch:1.2.13
                    └─ kind-of:6.0.2
              └─ snapdragon:0.8.2
                    └─ base:0.11.2
                          └─ define-property:1.0.0
                                └─ is-descriptor:1.0.2
                                      └─ is-accessor-descriptor:1.0.0
                                            └─ kind-of:6.0.2
                                      └─ is-data-descriptor:1.0.0
                                            └─ kind-of:6.0.2
                                      └─ kind-of:6.0.2

webpack-cli:3.3.6
        └─ global-modules:2.0.0
              └─ global-prefix:3.0.0
                    └─ kind-of:6.0.2

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isnumber:3.0.3

Vulnerabilities

DepShield reports that this application's usage of lodash.isnumber:3.0.3 results in the following vulnerability(s):


Occurrences

lodash.isnumber:3.0.3 is a transitive dependency introduced by the following direct dependency(s):

jsonwebtoken:8.5.1
        └─ lodash.isnumber:3.0.3

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):


Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

babel-core:6.26.3
        └─ babel-traverse:6.26.0
              └─ debug:2.6.9
        └─ debug:2.6.9

webpack:4.39.1
        └─ micromatch:3.1.10
              └─ extglob:2.0.4
                    └─ expand-brackets:2.1.4
                          └─ debug:2.6.9
              └─ snapdragon:0.8.2
                    └─ debug:2.6.9

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.7

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.7 results in the following vulnerability(s):


Occurrences

ini:1.3.7 is a transitive dependency introduced by the following direct dependency(s):

cypress:6.6.0
        └─ is-installed-globally:0.3.2
              └─ global-dirs:2.1.0
                    └─ ini:1.3.7

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.5) Vulnerability due to usage of express:4.17.1

Vulnerabilities

DepShield reports that this application's usage of express:4.17.1 results in the following vulnerability(s):

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 8.2) Vulnerability due to usage of y18n:4.0.0

Vulnerabilities

DepShield reports that this application's usage of y18n:4.0.0 results in the following vulnerability(s):


Occurrences

y18n:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

nyc:15.1.0
        └─ yargs:15.4.1
              └─ y18n:4.0.0

webpack:4.39.1
        └─ terser-webpack-plugin:1.4.5
              └─ cacache:12.0.2
                    └─ y18n:4.0.0

webpack-cli:3.3.6
        └─ yargs:13.2.4
              └─ y18n:4.0.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isstring:4.0.1

Vulnerabilities

DepShield reports that this application's usage of lodash.isstring:4.0.1 results in the following vulnerability(s):


Occurrences

lodash.isstring:4.0.1 is a transitive dependency introduced by the following direct dependency(s):

jsonwebtoken:8.5.1
        └─ lodash.isstring:4.0.1

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.once:4.1.1

Vulnerabilities

DepShield reports that this application's usage of lodash.once:4.1.1 results in the following vulnerability(s):


Occurrences

lodash.once:4.1.1 is a transitive dependency introduced by the following direct dependency(s):

cypress:6.6.0
        └─ @cypress/xvfb:1.2.4
              └─ lodash.once:4.1.1

jsonwebtoken:8.5.1
        └─ lodash.once:4.1.1

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.includes:4.3.0

Vulnerabilities

DepShield reports that this application's usage of lodash.includes:4.3.0 results in the following vulnerability(s):


Occurrences

lodash.includes:4.3.0 is a transitive dependency introduced by the following direct dependency(s):

jsonwebtoken:8.5.1
        └─ lodash.includes:4.3.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.8

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.8 results in the following vulnerability(s):


Occurrences

ini:1.3.8 is a transitive dependency introduced by the following direct dependency(s):

webpack-cli:3.3.6
        └─ findup-sync:3.0.0
              └─ resolve-dir:1.0.1
                    └─ global-modules:1.0.0
                          └─ global-prefix:1.0.2
                                └─ ini:1.3.8
        └─ global-modules:2.0.0
              └─ global-prefix:3.0.0
                    └─ ini:1.3.8

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

Expired event needs validation context

Current

const authorization = new WebAuth(...);
authorization.on('expired', token => {
  // Token could be accessToken or refreshToken but need context of validation
});

Expected

const authorization = new WebAuth(...);
/**
* @param payload.token {"accessToken"|"refreshToken"} - Name of expired token
* @param payload.side {"locally"|"server"} - Side where check expiration 
*/
authorization.on('expired', payload => {
  const { token, side } = payload;
});

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isboolean:3.0.3

Vulnerabilities

DepShield reports that this application's usage of lodash.isboolean:3.0.3 results in the following vulnerability(s):


Occurrences

lodash.isboolean:3.0.3 is a transitive dependency introduced by the following direct dependency(s):

jsonwebtoken:8.5.1
        └─ lodash.isboolean:3.0.3

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:4.0.0

Vulnerabilities

DepShield reports that this application's usage of kind-of:4.0.0 results in the following vulnerability(s):


Occurrences

kind-of:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ micromatch:3.1.10
              └─ snapdragon:0.8.2
                    └─ base:0.11.2
                          └─ cache-base:1.0.1
                                └─ has-value:1.0.0
                                      └─ has-values:1.0.0
                                            └─ kind-of:4.0.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash:4.17.15

Vulnerabilities

DepShield reports that this application's usage of lodash:4.17.15 results in the following vulnerability(s):


Occurrences

lodash:4.17.15 is a transitive dependency introduced by the following direct dependency(s):

babel-core:6.26.3
        └─ babel-generator:6.26.1
              └─ lodash:4.17.15
        └─ babel-register:6.26.0
              └─ lodash:4.17.15
        └─ babel-template:6.26.0
              └─ lodash:4.17.15
        └─ babel-traverse:6.26.0
              └─ lodash:4.17.15
        └─ babel-types:6.26.0
              └─ lodash:4.17.15
        └─ lodash:4.17.15

babel-preset-es2015:6.24.1
        └─ babel-plugin-transform-es2015-block-scoping:6.26.0
              └─ lodash:4.17.15
        └─ babel-plugin-transform-es2015-classes:6.24.1
              └─ babel-helper-define-map:6.26.0
                    └─ lodash:4.17.15
        └─ babel-plugin-transform-es2015-sticky-regex:6.24.1
              └─ babel-helper-regex:6.26.0
                    └─ lodash:4.17.15

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:3.2.2

Vulnerabilities

DepShield reports that this application's usage of kind-of:3.2.2 results in the following vulnerability(s):


Occurrences

kind-of:3.2.2 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ micromatch:3.1.10
              └─ braces:2.3.2
                    └─ fill-range:4.0.0
                          └─ is-number:3.0.0
                                └─ kind-of:3.2.2
                    └─ snapdragon-node:2.1.1
                          └─ snapdragon-util:3.0.1
                                └─ kind-of:3.2.2
              └─ snapdragon:0.8.2
                    └─ base:0.11.2
                          └─ cache-base:1.0.1
                                └─ to-object-path:0.3.0
                                      └─ kind-of:3.2.2
                          └─ class-utils:0.3.6
                                └─ static-extend:0.1.2
                                      └─ object-copy:0.1.0
                                            └─ kind-of:3.2.2
                    └─ define-property:0.2.5
                          └─ is-descriptor:0.1.6
                                └─ is-accessor-descriptor:0.1.6
                                      └─ kind-of:3.2.2
                                └─ is-data-descriptor:0.1.4
                                      └─ kind-of:3.2.2

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isinteger:4.0.4

Vulnerabilities

DepShield reports that this application's usage of lodash.isinteger:4.0.4 results in the following vulnerability(s):


Occurrences

lodash.isinteger:4.0.4 is a transitive dependency introduced by the following direct dependency(s):

jsonwebtoken:8.5.1
        └─ lodash.isinteger:4.0.4

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.5

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.5 results in the following vulnerability(s):


Occurrences

ini:1.3.5 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ watchpack:1.6.0
              └─ chokidar:2.1.6
                    └─ fsevents:1.2.9
                          └─ node-pre-gyp:0.12.0
                                └─ rc:1.2.8
                                      └─ ini:1.3.5

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 8.8) Vulnerability due to usage of minimist:1.2.0

Vulnerabilities

DepShield reports that this application's usage of minimist:1.2.0 results in the following vulnerability(s):


Occurrences

minimist:1.2.0 is a transitive dependency introduced by the following direct dependency(s):

babel-loader:7.1.5
        └─ loader-utils:1.2.3
              └─ json5:1.0.1
                    └─ minimist:1.2.0

webpack:4.39.1
        └─ watchpack:1.6.0
              └─ chokidar:2.1.6
                    └─ fsevents:1.2.9
                          └─ node-pre-gyp:0.12.0
                                └─ rc:1.2.8
                                      └─ minimist:1.2.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 8.8) Vulnerability due to usage of minimist:0.0.8

Vulnerabilities

DepShield reports that this application's usage of minimist:0.0.8 results in the following vulnerability(s):


Occurrences

minimist:0.0.8 is a transitive dependency introduced by the following direct dependency(s):

babel-loader:7.1.5
        └─ mkdirp:0.5.1
              └─ minimist:0.0.8

webpack:4.39.1
        └─ watchpack:1.6.0
              └─ chokidar:2.1.6
                    └─ fsevents:1.2.9
                          └─ node-pre-gyp:0.12.0
                                └─ mkdirp:0.5.1
                                      └─ minimist:0.0.8

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:5.1.0

Vulnerabilities

DepShield reports that this application's usage of kind-of:5.1.0 results in the following vulnerability(s):


Occurrences

kind-of:5.1.0 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ micromatch:3.1.10
              └─ snapdragon:0.8.2
                    └─ define-property:0.2.5
                          └─ is-descriptor:0.1.6
                                └─ kind-of:5.1.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.5) Vulnerability due to usage of acorn:6.2.1

Vulnerabilities

DepShield reports that this application's usage of acorn:6.2.1 results in the following vulnerability(s):


Occurrences

acorn:6.2.1 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ acorn:6.2.1

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 6.1) Vulnerability due to usage of serialize-javascript:1.7.0

Vulnerabilities

DepShield reports that this application's usage of serialize-javascript:1.7.0 results in the following vulnerability(s):


Occurrences

serialize-javascript:1.7.0 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ terser-webpack-plugin:1.4.1
              └─ serialize-javascript:1.7.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.5) Vulnerability due to usage of yargs-parser:13.1.1

Vulnerabilities

DepShield reports that this application's usage of yargs-parser:13.1.1 results in the following vulnerability(s):


Occurrences

yargs-parser:13.1.1 is a transitive dependency introduced by the following direct dependency(s):

webpack-cli:3.3.6
        └─ yargs:13.2.4
              └─ yargs-parser:13.1.1

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.flattendeep:4.4.0

Vulnerabilities

DepShield reports that this application's usage of lodash.flattendeep:4.4.0 results in the following vulnerability(s):


Occurrences

lodash.flattendeep:4.4.0 is a transitive dependency introduced by the following direct dependency(s):

nyc:15.1.0
        └─ caching-transform:4.0.0
              └─ package-hash:4.0.0
                    └─ lodash.flattendeep:4.4.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.5) Vulnerability due to usage of acorn:6.4.1

Vulnerabilities

DepShield reports that this application's usage of acorn:6.4.1 results in the following vulnerability(s):


Occurrences

acorn:6.4.1 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ acorn:6.4.1

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isplainobject:4.0.6

Vulnerabilities

DepShield reports that this application's usage of lodash.isplainobject:4.0.6 results in the following vulnerability(s):


Occurrences

lodash.isplainobject:4.0.6 is a transitive dependency introduced by the following direct dependency(s):

jsonwebtoken:8.5.1
        └─ lodash.isplainobject:4.0.6

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

[DepShield] (CVSS 5.6) Vulnerability due to usage of elliptic:6.5.0

Vulnerabilities

DepShield reports that this application's usage of elliptic:6.5.0 results in the following vulnerability(s):


Occurrences

elliptic:6.5.0 is a transitive dependency introduced by the following direct dependency(s):

webpack:4.39.1
        └─ node-libs-browser:2.2.1
              └─ crypto-browserify:3.12.0
                    └─ browserify-sign:4.0.4
                          └─ elliptic:6.5.0
                    └─ create-ecdh:4.0.3
                          └─ elliptic:6.5.0

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.