fix jwt security issue by using golang-jwt package (#1066)

2021-09-19 22:33:35 +08:00
parent a5407479a6
commit 30e49f2939
6 changed files with 8 additions and 7 deletions
--- a/rest/token/tokenparser.go
+++ b/rest/token/tokenparser.go
@@ -6,8 +6,8 @@ import (
 	"sync/atomic"
 	"time"

-	"github.com/dgrijalva/jwt-go"
-	"github.com/dgrijalva/jwt-go/request"
+	"github.com/golang-jwt/jwt/v4"
+	"github.com/golang-jwt/jwt/v4/request"
 	"github.com/tal-tech/go-zero/core/timex"
 )