Update dependency jwks-rsa to v1.12.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
jwks-rsa	1.2.1 -> 1.12.3

---

Release Notes

auth0/node-jwks-rsa

v1.12.3

Compare Source

Added

• Add alg to SigningKey types #​220 (okko)

Fixed

• Fix npmjs resolves #​221 (adamjmcgrath)
• Fix Import default Axios instance #​216 (dsebastien)

v1.12.2

Compare Source

Fixed

• Added coverage folders to .npmignore

v1.12.1

Compare Source

Security

• Bump Axios to ^0.21.1 #​208 (72636c)

v1.12.0

Compare Source

Added

• Provide an alternative source for supplying keysets #​202 (davidpatrick)

Deprecation
We are deprecating passing in a jwksObject to the client for reasons laid out in #​202. In order to load keys from anything other than the jwksUri, please use the getKeysInterceptor.

  const client = new JwksClient({ 
    jwksUri: 'https://my-enterprise-id-provider/.well-known/jwks.json',
    getKeysInterceptor: (cb) => {
      const file = fs.readFileSync(jwksFile);
      return cb(null, file.keys);
    }
  });

v1.11.0

Compare Source

Added

• Add ability to configure proxy with env vars #​188 (lubomir-haralampiev)

v1.10.1

Compare Source

Fixed

• fix proxy agent for http #​182 (NShahri)
• fix dependencies for --production flag with npm #​180 (alexrqs)

v1.10.0

Compare Source

Added

• getSigningKeys return algorithm #​168 (moander)

Fixed

• Add missing async methods to Typescript type definitions #​163 (mwgamble)
• Fixing proxy on Axios #​176 (davidpatrick)
• Fix caching and rateLimiting on getSigningKeyAsync #​177 (davidpatrick)

v1.9.0

Compare Source

Added

• Add promisified methods to JwksClient #​161 (jimmyjames)
• Update express-jwt ^6.0.0 #​157 (davidpatrick)

Fixed

• Update Buffer initialization to non-deprecated method #​154 (cwardcode)
• Use axios url parameter instead of baseURL #​153 (novascreen)

Security

• Bump lodash from 4.17.15 to 4.17.19 [#​152](https://github.com/auth0/node-jwks

v1.8.1

Compare Source

Fixed

• Fix #​139 strictSsl: false option being ignored #​146 (kopancek)

Security

• Update dependencies to latest #​147 (lbalmaceda)

v1.8.0

Compare Source

Added

• Added timeout with default value of 30s #​132 (Cooke)

Changed

• Migrate from Deprecated Request Lib #​135 (davidpatrick)

Fixed

• Allow JWT to not contain a "kid" value#​55 (dejan9393)

v1.7.0

Compare Source

This release includes a change to the default caching mechanism. Caching is on now by default, with the decrease of the default time of 10hours to 10minutes. This change introduces better support for signing key rotation.

Added

• Add proxy option to jwksClient #​125 (Ogdentrod)

Changed

• [SDK-1221] Modify Cache Defaults #​123 (davidpatrick)

Fixed

• Add Linter step to CI #​129 (davidpatrick)
• Send the explicit commit SHA to Codecov #​128 (lbalmaceda)

v1.6.2

Compare Source

This patch release includes an alias for accessing the public key of a given JSON Web Key (JWK). This is in response to an unintended breaking change that was introduced as part of the last Typescript definitions change, included in the release with version 1.6.0.

Now, no matter what the public key algorithm is, you can obtain it like this:

client.getSigningKey(kid, (err, jwk) => {
  const publicKey = jwk.getPublicKey();
});

Fixed

• Add alias for obtaining the public key #​119 (lbalmaceda)
• Handling case when Jwk doesn't have 'use' parameter #​116 (manpreet-compro)

v1.6.1

Compare Source

Changed

• NPM dependencies update #​112 (ecasilla)
• Update lru-memoizer to 2.0.1 #​106 (sobil)

v1.6.0

Compare Source

Added

• Add agentOptions to customize request TLS/SSL options. https://github.com/auth0/node-jwks-rsa/pull/84

v1.5.1

Compare Source

Changed

• Now includes the jsonwebtoken as a runtime dependency not dev to avoid breaks with 1.5.0 installs
• Various dependencies in both the library and samples updated

v1.5.0

Compare Source

Added

• Integrate with passport-jwt #​77 (gconnolly)

v1.4.0

Compare Source

Added

• Allow custom headers in request #​77 (Mutmatt)

v1.3.0

Compare Source

Added

• Adding support for hapi 17.x.x #​38 (degrammer)

Fixed

• Fixing wrong error message #​41 (adematte)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.