Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API Leak on com.nimbusds:nimbus-jose-jwt #229

Closed
ALRubinger opened this issue Feb 12, 2024 · 2 comments · Fixed by #262
Closed

API Leak on com.nimbusds:nimbus-jose-jwt #229

ALRubinger opened this issue Feb 12, 2024 · 2 comments · Fixed by #262
Assignees
Labels
enhancement New feature or request good first issue Good for newcomers

Comments

@ALRubinger
Copy link
Contributor

Submodule crypto in web5-kt is exporting an api dependency:

  • api(libs.comNimbusdsJoseJwt) > com.nimbusds:nimbus-jose-jwt

This means consumers are expected to use this dep directly. Encapsulate necessary operations in the web5-kt API such that we're not exposing the com.nimbusds APIs and asking users to rely on those. Our use internally should be an impl detail. Then move this to an implementation dependency.

@ALRubinger ALRubinger added enhancement New feature or request good first issue Good for newcomers labels Feb 12, 2024
@frankhinek
Copy link
Contributor

Should be resolved by #110

@jiyoonie9
Copy link
Contributor

Hopefully actually resolved by #236

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers
Projects
Status: Done
Development

Successfully merging a pull request may close this issue.

3 participants