Update OpenIddict (#338)

* chore: updated OpenIddict to v4.9.0 * chore: Microsoft.IdentityModel.Tokens updated to 7.0.2 * chore: unpinned all the OpenIddict libraries chore: re-pinned Npgsql.EntityFrameworkCore.PostgreSQL * fix: remove reference to Microsoft.IdentityModel.Tokens * chore: npm audit fix * chore: remove OpenIddict and IdentityModel.Tokens from ignored dependencies in dependabot.yml --------- Co-authored-by: Timo Notheisen <[email protected]>
nmshd · Oct 17, 2023 · a045104 · a045104
1 parent 35ba6af
commit a045104
Show file tree

Hide file tree

Showing 5 changed files with 25 additions and 35 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -9,10 +9,8 @@ updates:
         patterns:
           - "*"
         exclude-patterns:
-          - "OpenIddict.*"
           - "AspNetCore.HealthChecks.NpgSql"
           - "Npgsql.EntityFrameworkCore.PostgreSQL"
-          - "Microsoft.IdentityModel.Tokens"
     reviewers:
       - "tnotheis"
     labels:

diff --git a/AdminUi/src/AdminUi/AdminUi.csproj b/AdminUi/src/AdminUi/AdminUi.csproj
@@ -19,8 +19,7 @@
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
-        <!-- CAUTION: Do not upgrade OpenIddict to a version greater than 4.3.0, because it breaks authentication -->
-        <PackageReference Include="OpenIddict.EntityFrameworkCore" Version="[4.3.0]" />
+        <PackageReference Include="OpenIddict.EntityFrameworkCore" Version="4.9.0" />
         <PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" />
         <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
         <PackageReference Include="FluentValidation.AspNetCore" Version="11.3.0" />

diff --git a/AdminUi/src/AdminUi/ClientApp/package-lock.json b/AdminUi/src/AdminUi/ClientApp/package-lock.json
diff --git a/Modules/Devices/src/Devices.Application/Devices.Application.csproj b/Modules/Devices/src/Devices.Application/Devices.Application.csproj
@@ -1,4 +1,4 @@
-<Project Sdk="Microsoft.NET.Sdk">
+<Project Sdk="Microsoft.NET.Sdk">
 
 	<PropertyGroup>
 		<TargetFramework>net7.0</TargetFramework>
@@ -12,12 +12,8 @@
 		<PackageReference Include="FluentAssertions" Version="6.12.0" />
 		<PackageReference Include="FluentValidation" Version="11.7.1" />
 		<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.7.1" />
-		<!-- CAUTION: Do not upgrade 'Microsoft.IdentityModel.Tokens' to 7.*, because it will not be compatible with the pinned OpenIddict version of 4.3.0 anymore -->
-		<PackageReference Include="Microsoft.IdentityModel.Tokens" Version="[6.32.3]" />
-		<!-- CAUTION: Do not upgrade OpenIddict to a version greater than 4.3.0, because it breaks authentication -->
-		<PackageReference Include="OpenIddict.Core" Version="[4.3.0]" />
-		<!-- CAUTION: Do not upgrade OpenIddict to a version greater than 4.3.0, because it breaks authentication -->
-		<PackageReference Include="OpenIddict.EntityFrameworkCore.Models" Version="[4.3.0]" />
+		<PackageReference Include="OpenIddict.Core" Version="4.9.0" />
+		<PackageReference Include="OpenIddict.EntityFrameworkCore.Models" Version="4.9.0" />
 	</ItemGroup>
 
 	<ItemGroup>
@@ -26,5 +22,4 @@
 		<ProjectReference Include="..\..\..\..\BuildingBlocks\src\Crypto\Crypto.csproj" />
 		<ProjectReference Include="..\Devices.Domain\Devices.Domain.csproj" />
 	</ItemGroup>
-
 </Project>
diff --git a/Modules/Devices/src/Devices.Infrastructure/Devices.Infrastructure.csproj b/Modules/Devices/src/Devices.Infrastructure/Devices.Infrastructure.csproj
@@ -25,10 +25,8 @@
         <PackageReference Include="Microsoft.Extensions.Logging" Version="7.0.0" />
         <!-- CAUTION: Do not upgrade 'Npgsql.EntityFrameworkCore.PostgreSQL' to 7.0.11, because there is an error regarding __EFMigrationHistory tables introduces with the fix of the following GitHub issue: https://github.com/npgsql/efcore.pg/issues/2787 -->
         <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="[7.0.4]" />
-        <!-- CAUTION: Do not upgrade OpenIddict to a version greater than 4.3.0, because it breaks authentication -->
-        <PackageReference Include="OpenIddict.AspNetCore" Version="[4.3.0]" />
-        <!-- CAUTION: Do not upgrade OpenIddict to a version greater than 4.3.0, because it breaks authentication -->
-        <PackageReference Include="OpenIddict.EntityFrameworkCore" Version="[4.3.0]" />
+        <PackageReference Include="OpenIddict.AspNetCore" Version="4.9.0" />
+        <PackageReference Include="OpenIddict.EntityFrameworkCore" Version="4.9.0" />
         <PackageReference Include="Polly" Version="8.0.0" />
         <PackageReference Include="RabbitMQ.Client" Version="6.6.0" />
         <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="7.0.12" />