jwks-rsa uses url.parse() which has been deprecated in Node 24 #448
Description
Checklist
- I have looked into the Readme and Examples, and have not found a suitable solution or answer.
- I have searched the issues and have not found a suitable solution or answer.
- I have searched the Auth0 Community forums and have not found a suitable solution or answer.
- I agree to the terms within the Auth0 Code of Conduct.
Description
jwks-rsa uses url.parse() in /src/wrappers/request.js and that causes warnings in Node 24:
ERROR (node:5) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.
at Object.urlParse [as parse] (node:url:136:13)
at <anonymous> (/private/var/folders/pf/0yktn4f539d8mrs44jj_294r0000gn/T/tmp60zx6di2/node_modules/jwks-rsa/src/wrappers/request.js:16:17)
Would be great to get rid of this warning.
Reproduction
Check the description above.
Additional context
No response
jwks-rsa version
3.2.0
Node.js version
24.11.1