Skip to content

Update the JWT core package to get the latest Token Factory that supports Cognito token.#121

Merged
Duslerke merged 1 commit intodevelopmentfrom
bump-jwt-core-to-ver-with-cognito-token-support
Feb 25, 2026
Merged

Update the JWT core package to get the latest Token Factory that supports Cognito token.#121
Duslerke merged 1 commit intodevelopmentfrom
bump-jwt-core-to-ver-with-cognito-token-support

Conversation

@Duslerke
Copy link
Copy Markdown
Contributor

What:

  • Update the Hackney.Core.JWT package 2 versions up (1.72 -> 1.84 -> 1.87).

Why:

  • To get the latest version of the ITokenFactory implementation that adds support for the Cognito token schema.
  • The current v1.72 implementation crashes upon encountering Cognito Token due to empty groups key failing to map and leading Token.Groups to getting set as unhandled null.

Notes:

  • Updating only the JWT core package without the Authorizer as after additional digging through source code I've found that Authorizer core package merely references the JWT core package's ITokenFactory interface definition, and does not do anything more with the package. The way the Google groups authentication setup works is that for any given API, it uses JWT core package to register TokenFactory instance DI, and then that gets used by the Authorizer middleware to populate its Auth filter dependencies. The rest of the JWT usage seems to be limited down to Token class to extract data like email or user name for Activity History purposes.
  • Not updating the Authorizer as it seems to have additional functionality introduced apart JWT version upgrade, that would need extra testing. As it stands right now, due to the above reason, it does not need to be bumped on the APIs.
  • The version 1.84 was a fake release, accidentally triggered by some house cleaning done by the cyber team.
  • What changes does latest JWT intoduce? See PR: Add cognito authentication flow token schema support. lbh-core#68.

@Duslerke Duslerke requested a review from a team as a code owner February 25, 2026 15:17
@Duslerke Duslerke changed the title Update just the JWT core package to get the latest Token Factory that supports Cognito token. Update the JWT core package to get the latest Token Factory that supports Cognito token. Feb 25, 2026
@Duslerke Duslerke merged commit ed37031 into development Feb 25, 2026
3 checks passed
Duslerke added a commit that referenced this pull request Apr 10, 2026
Merge PR #121 from `development` to `master`.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants