Skip to content

Conversation

@UJESH2K
Copy link
Contributor

@UJESH2K UJESH2K commented Oct 22, 2025

PR Title: Fix JWT module version and checksum issues


This PR addresses and improves the JWT module integration in the project. The following updates have been made:

  • Upgraded github.com/golang-jwt/jwt to v4.5.2

    • Ensures we are using the latest stable version of the module.
    • Fixes checksum mismatch issues that were preventing successful module verification.
  • Added replace directives in go.mod

    • Ensures Go resolves the correct version of JWT and related dependencies.
    • Avoids security warnings and prevents accidental usage of incompatible versions.
  • Verified all modules with go mod verify

    • Confirms that all dependencies now match the expected checksums and are secure.

Why this improvement was needed:

  • Previously, builds were failing due to checksum mismatches for jwt/v4.
  • Without this fix, developers might face security warnings or build errors when working on authentication features.
  • This PR ensures smoother module management and safer dependency handling for everyone using the project.

Impact:

  • No functional changes to the authentication logic.
  • Improves developer experience and build stability.
  • Tested locally: all modules are correctly resolved and the project builds without errors.

Fixes: #5245

Signed-off-by: UJESH KUMAR YADAV <[email protected]>
@Jonsy13
Copy link
Contributor

Jonsy13 commented Oct 24, 2025

Please update this branch with main & resolve conflicts

Comment on lines 64 to 66
replace github.com/golang-jwt/jwt/v4 => github.com/golang-jwt/jwt/v4 v4.5.0

replace github.com/dgrijalva/jwt-go => github.com/golang-jwt/jwt/v4 v4.5.2
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since, the version is already updated above, these replace statements shouldn't be required. Please remove & try.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i am sorry i updated these changes after you merged the file
do i have to do anything now to help ?

sigs.k8s.io/yaml v1.2.0 // indirect
)

replace github.com/form3tech-oss/jwt/v4 => github.com/golang-jwt/jwt/v4 v4.5.2
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's a indirect dependency, Replacing like this will not work. You may leave it.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sure ill remove it aswell


go 1.24.0

toolchain go1.23.7
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be removed.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes i have removed toolchain part

Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Signed-off-by: UJESH KUMAR YADAV <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Hacktoberfest hacktoberfest-accepted Accepted for HacktoberFest

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants