Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

4.x #124

Merged
merged 15 commits into from
Jul 11, 2022
Merged

4.x #124

merged 15 commits into from
Jul 11, 2022

Conversation

marcelcorso
Copy link
Contributor

No description provided.

<!-- Conditionally obtain references for the .NET Framework 4.0 target -->
<ItemGroup Condition=" '$(TargetFramework)' == 'net40' ">
</ItemGroup>

<ItemGroup>
<PackageReference Include="JWT" Version="8.2.3" />

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Really like the switch to target .net6.0.
Be ware that targetting .net6.0 might leave customers running on .NET Framework behind, as you are no longer targetting .netstandard 6.0.
https://docs.microsoft.com/en-us/dotnet/standard/net-standard?tabs=net-standard-1-0#net-standard-not-deprecated

Is it possible to remove this dependency to JWT and switch over to System.Text.Json? That would result in a library with only framework dependencies.
JWT package still depends on Newtonsoft.Json, there is an issue on their side to replace it: jwt-dotnet/jwt#364

Copy link
Contributor Author

@marcelcorso marcelcorso Jun 15, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes. I think it's time we leave the .NET Framework behind.
Well make a major change release and then people have a chance to stay on old versions.

About your idea of using System's Jason.. it looks like a very good one.
We have limited c# knowledge these days over here so if you can do a PR or point us on the right direction it would be amazing

@ahmetkocadogan
Copy link
Contributor

hello @marcelcorso

Is it wise to create an endpoint for JWT validation, which we can post the incoming JWT signature and our access key, and get a true/false result, like if true "yes this request came from us" and no"this request does not come from us" ? If it is logical, this means JWT library dependency can be dropped.

@marcelcorso
Copy link
Contributor Author

@ahmetkocadogan doing another request to validate the JWT may be too slow.
The SDK follows this: https://developers.messagebird.com/api/#verifying-http-requests

@vallerion vallerion marked this pull request as ready for review July 11, 2022 07:24
@marcelcorso marcelcorso merged commit b4bd3dd into master Jul 11, 2022
@marcelcorso marcelcorso deleted the 4.x branch July 11, 2022 10:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants