-
Notifications
You must be signed in to change notification settings - Fork 1
Upgrade .NET 3.1 => 8.0 #65
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
Environment.SetEnvironmentVariable("jwtSecret", _fixture.Create<string>()); | ||
Environment.SetEnvironmentVariable("hackneyUserAuthTokenJwtSecret", _faker.Random.AlphaNumeric(25)); | ||
Environment.SetEnvironmentVariable("jwtSecret", _faker.Random.AlphaNumeric(50)); | ||
Environment.SetEnvironmentVariable("hackneyUserAuthTokenJwtSecret", _faker.Random.AlphaNumeric(50)); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Had to lengthen the string to meet the new security requirements
See here.
@@ -17,6 +17,7 @@ public static void Configure(this IServiceCollection services) | |||
|
|||
var connectionString = Environment.GetEnvironmentVariable("CONNECTION_STRING"); | |||
|
|||
AppContext.SetSwitch("Npgsql.EnableLegacyTimestampBehavior", true); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is to allow the database timestamps to be converted
@@ -1,22 +1,22 @@ | |||
.PHONY: setup | |||
setup: | |||
docker-compose build | |||
docker compose build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
docker compose
is more up to date and faster than docker-compose
.
Upgrade API to .NET 8.0 as 6.0 has reached End of Support.
TODO BEFORE MERGING:
This PR updates the
System.IdentityModel.Tokens.Jwt
package, including a vulnerability fix. See here for more details. Before merging, we need to confirm the key we use fits the new security requirements or this will introduce breaking changes.