Fixes security CVE-2022-23529 in the Hello servers.

Signed-off-by: Exadra37 <[email protected]>

Author: Exadra37

README.md

@@ -56,13 +56,13 @@ APPROOV_BASE64_SECRET=approov_base64_secret_here
 Now, add to your `package.json` file the [JWT dependency](https://github.com/auth0/express-jwt):
 
 ```json
-"express-jwt": "^6.0.0"
+"express-jwt": "^8.3.0"
 ```
 
 Next, in your code require the JWT package:
 
 ```javascript
-const jwt = require('express-jwt')
+const { expressjwt: jwt } = require('express-jwt')
 ```
 
 Now, grab the Approov secret and set it into a constant:

docs/APPROOV_TOKEN_BINDING_QUICKSTART.md

@@ -116,7 +116,7 @@ api.use(cors())
 //////////////////
 
 const dotenv = require('dotenv').config()
-const jwt = require('express-jwt')
+const { expressjwt: jwt } = require('express-jwt')
 const crypto = require('crypto')
 
 

docs/APPROOV_TOKEN_QUICKSTART.md

@@ -116,7 +116,7 @@ api.use(cors())
 //////////////////
 
 const dotenv = require('dotenv').config()
-const jwt = require('express-jwt')
+const { expressjwt: jwt } = require('express-jwt')
 
 
 ///////////////////

servers/hello/src/approov-protected-server/token-binding-check/hello-server-protected.js

@@ -1,6 +1,6 @@
 const debug = require('debug')('hello-server')
 const dotenv = require('dotenv').config()
-const jwt = require('express-jwt')
+const { expressjwt: jwt } = require('express-jwt')
 const crypto = require('crypto')
 const express = require('express')
 const cors = require('cors')