Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290)

Signed-off-by: hongming <coder.scala@gmail.com> (cherry picked from commit fa7c1340e3)
2024-11-26 11:13:36 +08:00
parent 4583b5a62e
commit b1a887fbb4
40 changed files with 6 additions and 9253 deletions
--- a/pkg/kapis/oauth/handler.go
+++ b/pkg/kapis/oauth/handler.go
@@ -14,8 +14,8 @@ import (
 	"time"

 	"github.com/emicklei/go-restful/v3"
+	"github.com/go-jose/go-jose/v4"
 	"github.com/golang-jwt/jwt/v4"
-	"gopkg.in/square/go-jose.v2"
 	apierrors "k8s.io/apimachinery/pkg/api/errors"
 	"k8s.io/apiserver/pkg/authentication/user"
 	"k8s.io/klog/v2"