Fixes security CVE-2022-23529 in the Shapes server.

Signed-off-by: Exadra37 <[email protected]>

Author: Exadra37

servers/shapes-api/README.md

@@ -58,10 +58,7 @@ The token binding in an Approov token is the one in the `pay` key:
 "pay":"f3U2fniBJVE04Tdecj0d6orV9qT9t52TjfHxdUqDBgY="
 ```
 
-**ALERT**:
-
-Please bear in mind that the token binding is not meant to pass application data
-to the API server.
+> **ALERT**: Please bear in mind that the token binding is not meant to pass application data to the API server.
 
 ## SYSTEM CLOCK
 
@@ -157,7 +154,7 @@ require('dotenv').config()
 ```js
 // file: approov-protected-server.js
 
-const jwt = require('express-jwt')
+const { expressjwt: jwt } = require('express-jwt')
 const crypto = require('crypto')
 ```
 

servers/shapes-api/approov-protected-server.js

@@ -1,5 +1,5 @@
 const debug = require('debug')('approov-protected-server')
-const jwt = require('express-jwt')
+const { expressjwt: jwt } = require('express-jwt')
 const crypto = require('crypto')
 const config = require('./configuration')
 const https = require('https')