Skip to content

upgrade gin-jwt version to 2.7.0 to get greater security #1024

@zhijian-pro

Description

@zhijian-pro

don't keep use dgrijalva/jwt-go

There are many security issue from dgrijalva/jwt-go, which is not maintained, we should switch to community maintained golang-jwt/jwt
the gin-jwt v2.6.3 dependent on dgrijalva/jwt-go v3.2.0 but gin-jwt v2.7.0 has been upgraded to golang-jwt/jwt/v4
image

so,we should upgrade gin-jwt version to 2.7.0 to get greater security

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions