Skip to content

Bump JWT core to 1.87.0 for Cognito support.#160

Merged
Duslerke merged 1 commit intomasterfrom
bump-jwt-version-for-cognito-token-support
Feb 27, 2026
Merged

Bump JWT core to 1.87.0 for Cognito support.#160
Duslerke merged 1 commit intomasterfrom
bump-jwt-version-for-cognito-token-support

Conversation

@Duslerke
Copy link
Contributor

@Duslerke Duslerke commented Feb 26, 2026

What:

  • Update the Hackney.Core.JWT package multiple versions up (1.49 -> 1.64 -> 1.65 -> 1.66 -> 1.72 -> 1.84 -> 1.87).

Why:

  • To get the latest version of the ITokenFactory implementation that adds support for the Cognito token schema.

Notes:

  • This seems like a big jump, but it's not as bad as it seems. Due to poor releases labelling, it's extremely difficult to tell what version introduces what changes. However! I've pulled down the 1.49 version of the JWT package and inspected its classes, interfaces, and implementations via ICSharpCode.Decompiler. It would seem that the only notable difference (except for my 1.87 release linked below) is a change of Nbf, Exp, Iat Token class fields data types from int to long (see code). This won't cause any backwards compatibility issues within any of the APIs because 1) they never check those fields, and 2) it's a transition to double length, so the numbers being parsed get more breathing room, not less.
  • What changes does latest JWT intoduce? See PR: Add cognito authentication flow token schema support. lbh-core#68.
  • These changes do not require immediate deployment, they merely need to be present within the repo's main branch. This is so those changes would already be there for when anyone would introduce new changes attempting to access Google groups from the token. Without this JWT version bump, any attempted access of Groups within the token would make the API wouldn't fall over.

@Duslerke Duslerke requested a review from a team as a code owner February 26, 2026 14:46
@Duslerke Duslerke merged commit ebd0494 into master Feb 27, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants