ruby-auth0 icon indicating copy to clipboard operation
ruby-auth0 copied to clipboard
verified publisher icon auth0

Update to latest jwt gem version 2.4.*

Open eric-christian opened this issue 3 years ago • 1 comments

Hello

We use the jwt gem within our rails app and noticed that we are unable to update the jwt gem to the latest version. The jwt gem's latest version is currently 2.4.1.

Auth0 locks the jwt gem to ~> 2.3.0 so only changes to the patch part of the semver are accepted. But the semver of the jwt gem had an increment on the minor part. Can this be changed to ~> 2.3 within the gemspec?

Best regards, Eric

eric-christian avatar Aug 08 '22 11:08 eric-christian

I'll have another look into this. I did try to update this dependency recently but was met with several errors.

stevehobbsdev avatar Aug 12 '22 16:08 stevehobbsdev

We need ruby 3.1 and openssl 3 support so are having issues with not being able to update to jwt 2.5.0 as it's pinned in auth0 to 2.3.x So other usage of JWT in our app that uses JWKs errors.

<OpenSSL::PKey::PKeyError: rsa#set_key= is incompatible with OpenSSL 3.0>

raldred avatar Aug 30 '22 15:08 raldred