Skip to content

Algo 1/fix vulnerabilities #136

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 12 commits into from
Aug 16, 2024
Merged

Algo 1/fix vulnerabilities #136

Changes from 1 commit
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
7954519
remove redundant package.json
algo-1 Aug 8, 2024
cfc9f3a
fix vanillajs-spa vulnerabilities
algo-1 Aug 9, 2024
99d2a41
update deprecated msal-node package
algo-1 Aug 9, 2024
245f7d9
fix vulnerabilites and update packages for protect-api
algo-1 Aug 9, 2024
ed0429f
fix vulnerabilites and update packages for protected-api-access-prote…
algo-1 Aug 9, 2024
9f20e96
update dependencies
algo-1 Aug 9, 2024
3abb978
update react-spa dependencies
algo-1 Aug 9, 2024
0f152dd
Merge branch 'algo-1/fix-vulnerabilities' of github.com:Azure-Samples…
algo-1 Aug 9, 2024
93ff803
revert change to jwksUri & issuer
algo-1 Aug 9, 2024
53286d8
fix vulnerabilities in protect-function-app
algo-1 Aug 13, 2024
747ed22
fix broken dependencies + conflicts & fix vulnerabilities in Angular SPA
algo-1 Aug 14, 2024
6de8ebe
fix postcss vulnerability
algo-1 Aug 15, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
revert change to jwksUri & issuer
  • Loading branch information
@algo-1
algo-1 committed Aug 9, 2024
commit 93ff80359dc266cadcc5151bb6826add1f1fac8e
4 changes: 2 additions & 2 deletions protected-api-access-protected-api/app.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,10 +42,10 @@ const app = express()
// Add Express middleware to validate JWT access tokens
app.use(jwt({
secret: jwks.expressJwtSecret({
jwksUri: `https://${config.auth.tenant}.ciamlogin.com/` + config.auth.tenant + '/discovery/v2.0/keys'
jwksUri: config.auth.authority + '/discovery/v2.0/keys'
}),
audience: config.auth.clientId,
issuer: `https://${config.auth.tenant}.ciamlogin.com/` + config.auth.tenant + '/v2.0',
issuer: config.auth.authority + '/v2.0',
algorithms: ['RS256']
}))

Expand Down