Skip to content

Upgrade .NET 3.1 => 8.0 #65

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Upgrade .NET 3.1 => 8.0 #65

wants to merge 4 commits into from

Conversation

notatiyyah
Copy link

@notatiyyah notatiyyah commented Jan 20, 2025

Upgrade API to .NET 8.0 as 6.0 has reached End of Support.

TODO BEFORE MERGING:

This PR updates the System.IdentityModel.Tokens.Jwt package, including a vulnerability fix. See here for more details. Before merging, we need to confirm the key we use fits the new security requirements or this will introduce breaking changes.

@notatiyyah notatiyyah marked this pull request as draft January 20, 2025 14:22
Environment.SetEnvironmentVariable("jwtSecret", _fixture.Create<string>());
Environment.SetEnvironmentVariable("hackneyUserAuthTokenJwtSecret", _faker.Random.AlphaNumeric(25));
Environment.SetEnvironmentVariable("jwtSecret", _faker.Random.AlphaNumeric(50));
Environment.SetEnvironmentVariable("hackneyUserAuthTokenJwtSecret", _faker.Random.AlphaNumeric(50));
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Had to lengthen the string to meet the new security requirements

See here.

@@ -17,6 +17,7 @@ public static void Configure(this IServiceCollection services)

var connectionString = Environment.GetEnvironmentVariable("CONNECTION_STRING");

AppContext.SetSwitch("Npgsql.EnableLegacyTimestampBehavior", true);
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is to allow the database timestamps to be converted

@@ -1,22 +1,22 @@
.PHONY: setup
setup:
docker-compose build
docker compose build
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

docker compose is more up to date and faster than docker-compose.

@notatiyyah notatiyyah marked this pull request as ready for review January 20, 2025 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant