[Snyk] Security upgrade jsonwebtoken from 1.3.0 to 5.0.0

[lbalmaceda]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • example/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	741/1000 Why? Mature exploit, Has a fix available, CVSS 7.1	Uninitialized Memory Exposure npm:base64url:20180511	Yes	Mature

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsonwebtoken

The new version differs by 69 commits.

• db8fb93 5.0.0
• e900282 Merge pull request #75 from auth0/dschenkelman-patch-1
• 634b8ed Merge pull request #78 from auth0/update-to-jws-3
• 9f24ffd Renaming `header.alg` mismatch exception to `invalid algorithm` and adding more mismatch tests.
• 19e6cc6 Adding @ dschenkelman feedback.
• 1e46234 Updating to jws@^3.0.0
• 35036b1 Only set iat if there is none
• 954bd7a Update CHANGELOG.md
• 24a3700 Update CHANGELOG.md
• a77df6d Documenting verify `algorithms` parameter.
• e46ca66 4.2.2
• 4027946 Merge pull request #71 from awlayton/fix-begin-public-rsa
• 8df6aab Fix verify for RSAPublicKey formated keys
• 4d22d08 4.2.1
• 7017e74 fix issue when public key start with BEING PUBLIC KEY. closes #70
• 7863a84 4.2.0
• c2bf7b2 Merge pull request #69 from auth0/fix_alg_vuln_on_verify
• 1bb584b Verification with an asymmetric key of a token signed with a symmetric key
• f9f3c34 fix commit links in changelog
• 316fa4a add changelog. closes #67
• b69d441 4.1.0
• 2217e0b Merge branch 'abalmos-json-claim-set'
• 3b0d0b6 add one more test
• 5290db1 First assume JWT claim set is an object

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.