dgrijalva/jwt-go is one of the outdated dependencies that we could not immediately upgrade to the latest major version (noted in <https://github.com/apache/trafficcontrol/pull/6407>), so what we have currently needs to be replaced regardless. But shaving a dependency off our go.mod would be even better.
> I think we would do more than just consider it -- we would greatly > appreciate it! Agreed, +1! -Zach On Mon, Dec 13, 2021 at 6:19 PM Rawlin Peters <[email protected]> wrote: > > I think we would do more than just consider it -- we would greatly > appreciate it! > > - Rawlin > > On Mon, Dec 13, 2021 at 5:47 PM Daisuke Maki <[email protected]> wrote: > > > > Hi, > > > > I recently made a PR regarding upgrading github.com/lestrrat-go/jwx to the > > latest version (https://github.com/apache/trafficcontrol/pull/6380). > > > > Upon further inspection I realized that my code was being mixed-and-matched > > with dgrijalva/jwt-go. Being the author of lestrrat-go/jwx, I would like to > > attempt to replace the use of dgrijalva/jwt-go with lestrrat-go/jwx/jwt: I > > realize this isn't strictly necessary, but would you at least consider this > > if I send in a PR? > > > > Thanks, > > --d
