From 8c9406a052612888a97a617e8c5aeeede7059656 Mon Sep 17 00:00:00 2001
From: mark stoker <mark@icatt.nl>
Date: Fri, 27 Sep 2024 15:20:40 +0200
Subject: [PATCH 1/2] vulnerable package fixes

---
 Kiss.Bff/Kiss.Bff.csproj | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/Kiss.Bff/Kiss.Bff.csproj b/Kiss.Bff/Kiss.Bff.csproj
index 9c555017..76759dd3 100644
--- a/Kiss.Bff/Kiss.Bff.csproj
+++ b/Kiss.Bff/Kiss.Bff.csproj
@@ -14,14 +14,13 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Duende.AccessTokenManagement.OpenIdConnect" Version="1.1.0" />
+    <PackageReference Include="Duende.AccessTokenManagement.OpenIdConnect" Version="2.1.2" />
     <PackageReference Include="HtmlSanitizer" Version="8.0.723" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="6.0.16" />
     <PackageReference Include="Microsoft.EntityFrameworkCore" Version="6.0.29" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="6.0.29" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Relational" Version="6.0.29" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="6.0.29" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="6.0.29" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="6.0.29">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

From b8b0b78736d2bcf2ca1aa0a3e9f73440946019eb Mon Sep 17 00:00:00 2001
From: mark stoker <mark@icatt.nl>
Date: Mon, 30 Sep 2024 09:07:32 +0200
Subject: [PATCH 2/2] downgrade token generating package ivm breaking min key
 size requirements

---
 Kiss.Bff/Kiss.Bff.csproj | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Kiss.Bff/Kiss.Bff.csproj b/Kiss.Bff/Kiss.Bff.csproj
index 76759dd3..622d782d 100644
--- a/Kiss.Bff/Kiss.Bff.csproj
+++ b/Kiss.Bff/Kiss.Bff.csproj
@@ -1,4 +1,4 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
+<Project Sdk="Microsoft.NET.Sdk.Web">
 
   <PropertyGroup>
     <TargetFramework>net6.0</TargetFramework>
@@ -14,7 +14,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Duende.AccessTokenManagement.OpenIdConnect" Version="2.1.2" />
+    <PackageReference Include="Duende.AccessTokenManagement.OpenIdConnect" Version="2.1.0" />
     <PackageReference Include="HtmlSanitizer" Version="8.0.723" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="6.0.16" />
     <PackageReference Include="Microsoft.EntityFrameworkCore" Version="6.0.29" />