chore: use node:util’s isDeepStrictEqual

This removes the `lodash.isEqual` dependency (which is deprecated)

Author: mvantellingen

.changeset/violet-crabs-suffer.md

@@ -0,0 +1,5 @@
+---
+"@labdigital/federated-token": minor
+---
+
+Replace lodash.isEqual with node:util `isDeepStrictEqual`

packages/core/package.json

@@ -37,13 +37,11 @@
 	},
 	"files": ["dist", "src"],
 	"dependencies": {
-		"jose": "5.4.0",
-		"lodash.isequal": "^4.5.0"
+		"jose": "5.4.0"
 	},
 	"devDependencies": {
 		"@types/cookie": "^0.6.0",
 		"@types/express": "^4.17.21",
-		"@types/lodash.isequal": "^4.5.8",
 		"@vitest/coverage-v8": "1.6.0",
 		"cookie": "^0.6.0",
 		"node-mocks-http": "^1.16.1",

packages/core/src/token.ts

@@ -1,4 +1,4 @@
-import isEqual from "lodash.isequal";
+import { isDeepStrictEqual } from "node:util";
 
 export type FederatedTokenContext = {
 	federatedToken?: FederatedToken;
@@ -145,10 +145,10 @@ export class FederatedToken {
 		);
 
 		if (trackModified) {
-			this._valueModified = !isEqual(this.values, token.values);
+			this._valueModified = !isDeepStrictEqual(this.values, token.values);
 
 			this._accessTokenModified = Object.keys(token.tokens ?? []).some(
-				(key) => !isEqual(this.tokens[key], token.tokens?.[key]),
+				(key) => !isDeepStrictEqual(this.tokens[key], token.tokens?.[key]),
 			);
 		}
 		// Set the authentication status, we only set it to true, never explicitly
@@ -181,7 +181,10 @@ export class FederatedToken {
 
 		// Merge tokens in object
 		for (const k in refreshTokens) {
-			if (trackModified && !isEqual(this.refreshTokens[k], refreshTokens[k])) {
+			if (
+				trackModified &&
+				!isDeepStrictEqual(this.refreshTokens[k], refreshTokens[k])
+			) {
 				this._refreshTokenModified = true;
 			}
 			this.refreshTokens[k] = refreshTokens[k];