ibm-cloud-sdk-core 4.0.1 → 4.0.3

package/.secrets.baseline

@@ -3,7 +3,7 @@
     "files": "package-lock.json|^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2022-12-20T17:56:56Z",
+  "generated_at": "2022-12-31T16:06:01Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -91,6 +91,16 @@
         "verified_result": null
       }
     ],
+    "CHANGELOG.md": [
+      {
+        "hashed_secret": "bc2f74c22f98f7b6ffbc2f67453dbfa99bce9a32",
+        "is_secret": false,
+        "is_verified": false,
+        "line_number": 6,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
+    ],
     "README.md": [
       {
         "hashed_secret": "32e8612d8ca77c7ea8374aa7918db8e5df9252ed",
@@ -484,7 +494,7 @@
         "hashed_secret": "a7ef1be18bb8d37af79f3d87761a203378bf26a2",
         "is_secret": false,
         "is_verified": false,
-        "line_number": 145,
+        "line_number": 146,
         "type": "Secret Keyword",
         "verified_result": null
       }
@@ -524,7 +534,7 @@
       }
     ]
   },
-  "version": "0.13.1+ibm.55.dss",
+  "version": "0.13.1+ibm.56.dss",
   "word_list": {
     "file": null,
     "hash": null

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [4.0.3](https://github.com/IBM/node-sdk-core/compare/v4.0.2...v4.0.3) (2023-01-09)
+
+
+### Bug Fixes
+
+* **VpcInstanceAuthenticator:** use correct version string ([4a1411a](https://github.com/IBM/node-sdk-core/commit/4a1411a76a09e9b1ade2c94bd98e63f79d845494))
+
+## [4.0.2](https://github.com/IBM/node-sdk-core/compare/v4.0.1...v4.0.2) (2022-12-30)
+
+
+### Bug Fixes
+
+* **auth:** revert to using decode instead verify for jwt ([#227](https://github.com/IBM/node-sdk-core/issues/227)) ([cf3d641](https://github.com/IBM/node-sdk-core/commit/cf3d64106f35943c34f2a9c5d1b4de63994aed2a))
+
 ## [4.0.1](https://github.com/IBM/node-sdk-core/compare/v4.0.0...v4.0.1) (2022-12-29)
 
 

package/auth/token-managers/jwt-token-manager.js

@@ -100,18 +100,7 @@ var JwtTokenManager = /** @class */ (function (_super) {
             logger_1.default.error(err);
             throw new Error(err);
         }
-        var decodedResponse;
-        try {
-            decodedResponse = (0, jsonwebtoken_1.verify)(this.accessToken);
-        }
-        catch (e) {
-            // the token is either an invalid JWT or it could not be verified
-            logger_1.default.error('Failed to verify the JWT. See error message:');
-            logger_1.default.error(e);
-            throw new Error(e);
-        }
-        // the 'catch' method above should handle any verificiation/decoding issues but
-        // this check is here as a failsafe
+        var decodedResponse = (0, jsonwebtoken_1.decode)(this.accessToken);
         if (!decodedResponse) {
             var err = 'Access token recieved is not a valid JWT';
             logger_1.default.error(err);

package/auth/token-managers/vpc-instance-token-manager.d.ts

@@ -1,5 +1,5 @@
 /**
- * (C) Copyright IBM Corp. 2021, 2022.
+ * (C) Copyright IBM Corp. 2021, 2023.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

package/auth/token-managers/vpc-instance-token-manager.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * (C) Copyright IBM Corp. 2021, 2022.
+ * (C) Copyright IBM Corp. 2021, 2023.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -74,7 +74,7 @@ var logger_1 = __importDefault(require("../../lib/logger"));
 var utils_1 = require("../utils");
 var jwt_token_manager_1 = require("./jwt-token-manager");
 var DEFAULT_IMS_ENDPOINT = 'http://169.254.169.254';
-var METADATA_SERVICE_VERSION = '2021-09-20';
+var METADATA_SERVICE_VERSION = '2022-03-01';
 /**
  * Token Manager for VPC Instance Authentication.
  */

package/es/auth/token-managers/jwt-token-manager.js

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import { verify } from 'jsonwebtoken';
+import { decode } from 'jsonwebtoken';
 import logger from '../../lib/logger';
 import { TokenManager } from './token-manager';
 /**
@@ -65,18 +65,7 @@ export class JwtTokenManager extends TokenManager {
             logger.error(err);
             throw new Error(err);
         }
-        let decodedResponse;
-        try {
-            decodedResponse = verify(this.accessToken);
-        }
-        catch (e) {
-            // the token is either an invalid JWT or it could not be verified
-            logger.error('Failed to verify the JWT. See error message:');
-            logger.error(e);
-            throw new Error(e);
-        }
-        // the 'catch' method above should handle any verificiation/decoding issues but
-        // this check is here as a failsafe
+        const decodedResponse = decode(this.accessToken);
         if (!decodedResponse) {
             const err = 'Access token recieved is not a valid JWT';
             logger.error(err);

package/es/auth/token-managers/vpc-instance-token-manager.d.ts

@@ -1,5 +1,5 @@
 /**
- * (C) Copyright IBM Corp. 2021, 2022.
+ * (C) Copyright IBM Corp. 2021, 2023.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.

package/es/auth/token-managers/vpc-instance-token-manager.js

@@ -1,5 +1,5 @@
 /**
- * (C) Copyright IBM Corp. 2021, 2022.
+ * (C) Copyright IBM Corp. 2021, 2023.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -26,7 +26,7 @@ import logger from '../../lib/logger';
 import { atMostOne } from '../utils';
 import { JwtTokenManager } from './jwt-token-manager';
 const DEFAULT_IMS_ENDPOINT = 'http://169.254.169.254';
-const METADATA_SERVICE_VERSION = '2021-09-20';
+const METADATA_SERVICE_VERSION = '2022-03-01';
 /**
  * Token Manager for VPC Instance Authentication.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ibm-cloud-sdk-core",
-  "version": "4.0.1",
+  "version": "4.0.3",
   "description": "Core functionality to support SDKs generated with IBM's OpenAPI SDK Generator.",
   "main": "index.js",
   "typings": "./es/index.d.ts",