Hidden dependencies

[karamosky]

This library has a dependency on node stream, node crypto and node url modules. When used in my project I was forced to provide fallbacks using Webpack.
Is there any way we can remove these dependencies @mcoqblin-hiptest? They seem to be deps on atlassian-jwt package.

[mcoqblin-hiptest]

Unfortunately I'm not sure we can do much. Webpack 5 does not provide polyfills for core node modules anymore. AP.context.getToken requires JWT, so even without atlassian-jwt we will still need crypto and stream.

I'm not sure about url. It is used by atlassian-jwt but I think it is used for QSH which we do not use. The dev server of Fake AP itself works without it.

Do you know which AP methods require url? Or does your build fail without event using it?

By the way you can provide these polyfill only in development and test environments in Webpack.

[karamosky]

How about switching to https://github.com/panva/jose which is a plain js implementation?

[mcoqblin-hiptest]

That's a good idea. Go ahead if you want to try, otherwise I'll try to do it during the week.