fix(deps): using local folder instead of git url for passport apple (#134)

passport apple depends on vulnerable verion of jsonwebtoken
 using a local folder to fix it

GH-127

Author: yeshamavani

.eslintignore

@@ -10,3 +10,4 @@ index.*
 commitlint.config.js
 
 .eslintrc.js
+vendor/

package-lock.json

@@ -56,15 +56,17 @@
     "@loopback/core": "^4.0.7",
     "ajv": "^8.11.0",
     "https-proxy-agent": "^5.0.0",
+    "jsonwebtoken": "^9.0.0",
     "passport": "^0.6.0",
-    "passport-apple": "git+https://github.com/yeshamavani/passport-apple.git",
+    "passport-apple": "file:vendor/passport-apple",
     "passport-azure-ad": "^4.3.4",
     "passport-cognito-oauth2": "^0.1.1",
     "passport-facebook": "^3.0.0",
     "passport-google-oauth20": "^2.0.0",
     "passport-http-bearer": "^1.0.1",
     "passport-instagram": "^1.0.0",
     "passport-local": "^1.0.0",
+    "passport-oauth2": "^1.6.1",
     "passport-oauth2-client-password": "^0.1.2",
     "tslib": "^2.0.0"
   },
@@ -83,6 +85,7 @@
     "@semantic-release/npm": "^9.0.1",
     "@semantic-release/release-notes-generator": "^10.0.3",
     "@types/express": "^4.17.13",
+    "@types/jsonwebtoken": "^9.0.1",
     "@types/lodash": "^4.14.181",
     "@types/node": "^14.18.36",
     "@types/passport": "^1.0.7",

package.json

@@ -37,8 +37,6 @@ import {
   ResourceOwnerVerifyProvider,
   PassportOtpStrategyFactoryProvider,
   OtpVerifyProvider,
-  SamlStrategyFactoryProvider,
-  SamlVerifyProvider,
 } from './strategies';
 import {Strategies} from './strategies/keys';
 import {
@@ -86,7 +84,6 @@ export class AuthenticationComponent implements Component {
         KeycloakStrategyFactoryProvider,
       [Strategies.Passport.COGNITO_OAUTH2_STRATEGY_FACTORY.key]:
         CognitoStrategyFactoryProvider,
-      [Strategies.SAML_STRATEGY_FACTORY.key]: SamlStrategyFactoryProvider,
 
       // Verifier functions
       [Strategies.Passport.OAUTH2_CLIENT_PASSWORD_VERIFIER.key]:
@@ -109,7 +106,6 @@ export class AuthenticationComponent implements Component {
       [Strategies.Passport.APPLE_OAUTH2_VERIFIER.key]: AppleAuthVerifyProvider,
       [Strategies.Passport.AZURE_AD_VERIFIER.key]: AzureADAuthVerifyProvider,
       [Strategies.Passport.KEYCLOAK_VERIFIER.key]: KeycloakVerifyProvider,
-      [Strategies.SAML_VERIFIER.key]: SamlVerifyProvider,
     };
     this.bindings = [];
     if (this.config?.useClientAuthenticationMiddleware) {