Switch github.com/lestrrat-go/jwx

[Daisuke Maki <le...@gmail.com>]

Hi,

I recently made a PR regarding upgrading github.com/lestrrat-go/jwx to the
latest version (https://github.com/apache/trafficcontrol/pull/6380).

Upon further inspection I realized that my code was being mixed-and-matched
with dgrijalva/jwt-go. Being the author of lestrrat-go/jwx, I would like to
attempt to replace the use of dgrijalva/jwt-go with lestrrat-go/jwx/jwt: I
realize this isn't strictly necessary, but would you at least consider this
if I send in a PR?

Thanks,
--d

Re: Switch github.com/lestrrat-go/jwx

[Zach Hoffman <zr...@apache.org>]

dgrijalva/jwt-go is one of the outdated dependencies that we could not
immediately upgrade to the latest major version (noted in
<https://github.com/apache/trafficcontrol/pull/6407>), so what we have
currently needs to be replaced regardless. But shaving a dependency
off our go.mod would be even better.

> I think we would do more than just consider it -- we would greatly
> appreciate it!

Agreed, +1!

-Zach

On Mon, Dec 13, 2021 at 6:19 PM Rawlin Peters <ra...@apache.org> wrote:
>
> I think we would do more than just consider it -- we would greatly
> appreciate it!
>
> - Rawlin
>
> On Mon, Dec 13, 2021 at 5:47 PM Daisuke Maki <le...@gmail.com> wrote:
> >
> > Hi,
> >
> > I recently made a PR regarding upgrading github.com/lestrrat-go/jwx to the
> > latest version (https://github.com/apache/trafficcontrol/pull/6380).
> >
> > Upon further inspection I realized that my code was being mixed-and-matched
> > with dgrijalva/jwt-go. Being the author of lestrrat-go/jwx, I would like to
> > attempt to replace the use of dgrijalva/jwt-go with lestrrat-go/jwx/jwt: I
> > realize this isn't strictly necessary, but would you at least consider this
> > if I send in a PR?
> >
> > Thanks,
> > --d

Re: Switch github.com/lestrrat-go/jwx

[Rawlin Peters <ra...@apache.org>]

I think we would do more than just consider it -- we would greatly
appreciate it!

- Rawlin

On Mon, Dec 13, 2021 at 5:47 PM Daisuke Maki <le...@gmail.com> wrote:
>
> Hi,
>
> I recently made a PR regarding upgrading github.com/lestrrat-go/jwx to the
> latest version (https://github.com/apache/trafficcontrol/pull/6380).
>
> Upon further inspection I realized that my code was being mixed-and-matched
> with dgrijalva/jwt-go. Being the author of lestrrat-go/jwx, I would like to
> attempt to replace the use of dgrijalva/jwt-go with lestrrat-go/jwx/jwt: I
> realize this isn't strictly necessary, but would you at least consider this
> if I send in a PR?
>
> Thanks,
> --d