293735012 Security Fixes and Dependency Updates

  - Replaced deprecated 'request' with 'postman-request', an actively maintained fork.
  - Updated and bumped versions of several vulnerable dependencies to enhance security.

app.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var request = require('request');
+var request = require('postman-request');
 var url = require('url');
 var fs = require('fs');
 var run = require('./cli/lib/gateway')();

cli/cmd.js

@@ -6,7 +6,7 @@ const fs = require('fs');
 const os = require('os');
 const path = require('path');
 const debug = require('debug')('start');
-const request = require('request');
+const request = require('postman-request');
 const configure = require('./lib/configure')();
 const upgradekvm = require('./lib/upgrade-kvm')();
 const upgradeauth = require('./lib/upgrade-edgeauth')();

cli/lib/cert-lib.js

@@ -1,5 +1,5 @@
 'use strict';
-const request = require('request');
+const request = require('postman-request');
 const util = require('util');
 const fs = require('fs');
 const path = require('path');

cli/lib/deploy-auth.js

@@ -3,7 +3,7 @@ const tmp = require('tmp');
 const cpr = require('cpr');
 const rimraf = require('rimraf');
 const apigeetool = require('apigeetool');
-//const request = require('request');
+//const request = require('postman-request');
 const assert = require('assert');
 const path = require('path');
 const async = require('async')

cli/lib/key-gen.js

@@ -4,7 +4,7 @@ const debug = require('debug')('edgemicro');
 const async = require('async');
 const crypto = require('crypto');
 const _ = require('lodash');
-const request = require('request');
+const request = require('postman-request');
 const url = require('url')
 const util = require('util');
 const assert = require('assert')

cli/lib/private.js

@@ -5,7 +5,7 @@ const path = require('path');
 //const apigeetool = require('apigeetool');
 const util = require('util');
 const url = require('url');
-const request = require('request');
+const request = require('postman-request');
 const debug = require('debug')('edgemicro');
 const async = require('async');
 const crypto = require('crypto');

cli/lib/rotate-key.js

@@ -6,7 +6,7 @@ const fs = require('fs');
 const path = require('path');
 const debug = require("debug")("jwkrotatekey");
 //const commander = require('commander');
-const request = require("request");
+const request = require('postman-request');
 const writeConsoleLog = require('microgateway-core').Logging.writeConsoleLog;
 
 const CONSOLE_LOG_TAG_COMP = 'microgateway rotate key';

cli/lib/token.js

@@ -1,7 +1,7 @@
 
 'use strict';
 
-const request = require('request');
+const request = require('postman-request');
 const util = require('util');
 const fs = require('fs');
 const path = require('path');

cli/lib/upgrade-edgeauth.js

@@ -2,7 +2,7 @@
 
 //const util = require("util");
 //const debug = require("debug")("jwkrotatekey");
-//const request = require("request");
+//const request = require('postman-request');
 var deployAuthLib = require('./deploy-auth');
 var deployAuth;
 

cli/lib/upgrade-kvm.js

@@ -3,7 +3,7 @@
 const pem = require("pem");
 const util = require("util");
 const debug = require("debug")("upgradekvm");
-const request = require("request");
+const request = require('postman-request');
 const writeConsoleLog = require('microgateway-core').Logging.writeConsoleLog;
 const CONSOLE_LOG_TAG_COMP = 'microgateway upgrade kvm';
 

cli/lib/verify.js

@@ -1,7 +1,7 @@
 'use strict';
 const edgeconfig = require('microgateway-config');
 //const path = require('path');
-const request = require('request');
+const request = require('postman-request');
 const async = require('async');
 //const assert = require('assert');
 const writeConsoleLog = require('microgateway-core').Logging.writeConsoleLog;

package.json

@@ -30,7 +30,7 @@
     "microgateway-plugins": "^3.3.2",
     "pem": "^1.8.1",
     "portastic": "^1.0.1",
-    "request": "^2.87.0",
+    "postman-request": "^2.88.1-postman.33",
     "rimraf": "^2.4.3",
     "tmp": "0.0.28",
     "uuid": "^3.2.1",
@@ -40,7 +40,7 @@
     "xml2js": "^0.5.0"
   },
   "devDependencies": {
-    "eslint": "^6.1.0",
+    "eslint": "^8.44.0",
     "eslint-config-google": "^0.13.0",
     "gulp": "^4.0.2",
     "gulp-shell": "^0.8.0",
@@ -49,11 +49,13 @@
     "minimist": "^1.2.6",
     "mocha": "^9.2.0",
     "nyc": "^15.1.0",
-    "request-promise": "^4.2.4",
-    "restify": "^8.4.0",
+    "restify": "^11.1.0",
     "rewire": "^6.0.0",
     "test-until": "^1.1.1"
   },
+  "overrides": {
+    "semver": "7.5.4"
+  },
   "scripts": {
     "start": "node app.js",
     "stop": "node stop.js",
@@ -89,7 +91,7 @@
   "author": "Kevin Swiber <[email protected]>",
   "engines": {
     "node": "^16 || ^18 || ^20",
-    "npm": ">=6.14.18"
+    "npm": ">=8.19.3"
   },
   "cpu": [
     "!arm",

test-stress/onekeytokenfreq.js

@@ -1,6 +1,6 @@
 'use strict';
 const assert = require('assert');
-const request = require('request');
+const request = require('postman-request');
 const url = require('url');
 const util = require('util');
 const denv = require('dotenv');

tests-cluster/cluster.js

@@ -2,7 +2,7 @@
 
 const assert = require('assert');
 const async = require('async');
-const request = require('request');
+const request = require('postman-request');
 const envVars = require('../tests/env')
 const tokenService = require('../cli/lib/token')();
 const edgeConfig = require('microgateway-config');