Skip to content

Conversation

@TomA-R
Copy link
Member

@TomA-R TomA-R commented Apr 25, 2023

What?

  • Upgrade firebase/php-jwt
  • Remove .travis.yml because we no longer use Travis
  • Minor README updates

Why?

To address CVE-2021-46743

Testing

  1. Tests still pass:
    Screen Shot 2023-04-25 at 12 35 44

  2. I manually verified this with the following script

use Bigcommerce\Api\Client as Bigcommerce;

require 'vendor/autoload.php';

Bigcommerce::configure([
    'client_id' => '...',
    'auth_token' => '...',
    'store_hash' => '...',
    'client_secret' => '...',
]);

var_dump(Bigcommerce::getCustomerLoginToken(1));

Which produced the expected result.

ping @bigcommerce/php

@TomA-R TomA-R merged commit e9866a0 into bigcommerce:master Apr 25, 2023
@TomA-R TomA-R deleted the bump_firebase_jwt branch April 25, 2023 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant