Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature request]: Replace usage of IdentityServer4 in tests #3008

Open
martincostello opened this issue Aug 1, 2024 · 0 comments
Open

[Feature request]: Replace usage of IdentityServer4 in tests #3008

martincostello opened this issue Aug 1, 2024 · 0 comments
Labels
feature suggestion help-wanted A change up for grabs for contributions from the community up-for-grabs

Comments

@martincostello
Copy link
Collaborator

Is your feature request related to a specific problem? Or an existing feature?

#3007 flagged that IdentityServer4 is completely deprecated and contains a number of vulnerabilities that cause errors when building with the .NET 9+ SDK (e.g. GHSA-55p7-v223-x366 and GHSA-ff4q-64jc-gx98).

For now, as this is just test code, we can suppress these like this:

<!-- This is just a sample for testing - updating to Duende.IdentityServer can be done at some point in the future -->
<ItemGroup>
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-55p7-v223-x366" />
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-ff4q-64jc-gx98" />
</ItemGroup>

Instead, we should properly fix the errors by using a supported alternative.

Describe the solution you'd like

Replace usage of with a more modern and supported alternative, such as Duende.IdentityServer.

Additional context

No response

@martincostello martincostello added feature suggestion help-wanted A change up for grabs for contributions from the community up-for-grabs labels Aug 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature suggestion help-wanted A change up for grabs for contributions from the community up-for-grabs
Projects
None yet
Development

No branches or pull requests

1 participant