Migrate JWT package

[j-sv]

The github.com/dgrijalva/jwt-go is deprecated and replaced by the new package. The deprecated library has a vulnerability that has not be released as a stable version.

The issue on the deprecated package: dgrijalva/jwt-go#422

The correction in the new package version is here: golang-jwt/jwt#6

[Ekberg]

Did you notice any breaking changes between the two libraries? The diff seems reasonable just wondering if we need to change something else to keep the same behavior.

[j-sv]

Did you notice any breaking changes between the two libraries? The diff seems reasonable just wondering if we need to change something else to keep the same behavior.

Their migration guide says the v4 version should be a drop-in replacement for a v3.x.y version of the old repo. So there shouldn't be a need for any changes. https://github.com/golang-jwt/jwt/blob/main/MIGRATION_GUIDE.md

The only real change was changing jwt.StandardClaims to jwt.RegisteredClaims as it warned that StandardClaims was deprecated. The types are slightly different, but the common fields appear to work the same, so it doesn't appear that there would be any impact.