From 9bd3a77ae59f5037700f5f1dc44825aa72bb83ae Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 27 Dec 2025 10:43:44 +0000 Subject: [PATCH] fix: upgrade passport-oauth2 from 1.4.0 to 1.8.0 Snyk has created this PR to upgrade passport-oauth2 from 1.4.0 to 1.8.0. See this package in npm: passport-oauth2 See this project in Snyk: https://app.snyk.io/org/valecor95/project/032a76ae-51fa-4465-95ae-d57b8512ffb2?utm_source=github&utm_medium=referral&page=upgrade-pr --- package-lock.json | 21 +++++++++++++++++---- package.json | 2 +- 2 files changed, 18 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index d30225f..42328ca 100644 --- a/package-lock.json +++ b/package-lock.json @@ -86,6 +86,11 @@ "resolved": "https://registry.npmjs.org/base64id/-/base64id-1.0.0.tgz", "integrity": "sha1-R2iMuZu2gE8OBtPnY7HDLlfY5rY=" }, + "base64url": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/base64url/-/base64url-3.0.1.tgz", + "integrity": "sha512-ir1UPr3dkwexU7FdV8qBBbNDRUhMmIekYMFZfi+C/sLNnRESKPl23nB9b2pltqfOQNnGzsDdId90AEtG5tCx4A==" + }, "bcryptjs": { "version": "2.4.3", "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz", @@ -829,14 +834,22 @@ } }, "passport-oauth2": { - "version": "1.4.0", - "resolved": "https://registry.npmjs.org/passport-oauth2/-/passport-oauth2-1.4.0.tgz", - "integrity": "sha1-9i+BWDy+EmCb585vFguTlaJ7hq0=", + "version": "1.8.0", + "resolved": "https://registry.npmjs.org/passport-oauth2/-/passport-oauth2-1.8.0.tgz", + "integrity": "sha512-cjsQbOrXIDE4P8nNb3FQRCCmJJ/utnFKEz2NX209f7KOHPoX18gF7gBzBbLLsj2/je4KrgiwLLGjf0lm9rtTBA==", "requires": { - "oauth": "0.9.x", + "base64url": "3.x.x", + "oauth": "0.10.x", "passport-strategy": "1.x.x", "uid2": "0.0.x", "utils-merge": "1.x.x" + }, + "dependencies": { + "oauth": { + "version": "0.10.2", + "resolved": "https://registry.npmjs.org/oauth/-/oauth-0.10.2.tgz", + "integrity": "sha512-JtFnB+8nxDEXgNyniwz573xxbKSOu3R8D40xQKqcjwJ2CDkYqUDI53o6IuzDJBx60Z8VKCm271+t8iFjakrl8Q==" + } } }, "passport-strategy": { diff --git a/package.json b/package.json index a5010da..56422b4 100644 --- a/package.json +++ b/package.json @@ -25,7 +25,7 @@ "passport-dropbox-oauth2": "^1.1.0", "passport-google-oauth20": "^1.0.0", "passport-local": "^1.0.0", - "passport-oauth2": "^1.4.0", + "passport-oauth2": "^1.8.0", "socket.io": "^2.2.0" } }