chore(deps): bump @clerk/backend from 2.32.0 to 2.33.0

[dependabot]

Bumps @clerk/backend from 2.32.0 to 2.33.0.

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​2.33.0

Minor Changes

• Added support for JWT token format when creating and verifying machine-to-machine (M2M) tokens. This enables fully networkless verification when using the public JWT key. (#7883) by @​wobsoriano

  Creating a JWT-format M2M token

  const clerkClient = createClerkClient({
    machineSecretKey: process.env.CLERK_MACHINE_SECRET_KEY,
  });
  const m2mToken = await clerkClient.m2m.createToken({
  tokenFormat: 'jwt',
  });
  console.log('M2M token created:', m2mToken.token);

  Verifying a token

  const clerkClient = createClerkClient({
    machineSecretKey: process.env.CLERK_MACHINE_SECRET_KEY,
  });
  const authHeader = req.headers.get('Authorization');
  const token = authHeader.slice(7);
  const verified = await clerkClient.m2m.verify(token);
  console.log('Verified M2M token:', verified);

  Networkless verification

  const clerkClient = createClerkClient({
    jwtKey: process.env.CLERK_JWT_KEY,
  });
  const authHeader = req.headers.get('Authorization');
  const token = authHeader.slice(7);
  const verified = await clerkClient.m2m.verify(token);
  console.log('Verified M2M token:', verified);

• Add list() method to M2M tokens API to retrieve a list of machine-to-machine tokens for a given machine. (#7939) by @​wobsoriano

... (truncated)

Changelog

Sourced from @​clerk/backend's changelog.

2.33.0

Minor Changes

• Added support for JWT token format when creating and verifying machine-to-machine (M2M) tokens. This enables fully networkless verification when using the public JWT key. (#7883) by @​wobsoriano

  Creating a JWT-format M2M token

  const clerkClient = createClerkClient({
    machineSecretKey: process.env.CLERK_MACHINE_SECRET_KEY,
  });
  const m2mToken = await clerkClient.m2m.createToken({
  tokenFormat: 'jwt',
  });
  console.log('M2M token created:', m2mToken.token);

  Verifying a token

  const clerkClient = createClerkClient({
    machineSecretKey: process.env.CLERK_MACHINE_SECRET_KEY,
  });
  const authHeader = req.headers.get('Authorization');
  const token = authHeader.slice(7);
  const verified = await clerkClient.m2m.verify(token);
  console.log('Verified M2M token:', verified);

  Networkless verification

  const clerkClient = createClerkClient({
    jwtKey: process.env.CLERK_JWT_KEY,
  });
  const authHeader = req.headers.get('Authorization');
  const token = authHeader.slice(7);
  const verified = await clerkClient.m2m.verify(token);
  console.log('Verified M2M token:', verified);

... (truncated)

Commits

• f2e31af ci(repo): Version packages (Core 2) (#7942)
• 76a5a1b feat(backend,nextjs): Add support for M2M JWT creation and verification (#7883)
• 51bc9a9 chore(backend): Add M2M token list method (#7939)
• 8a478ea ci(repo): Version packages (Core 2) (#7938)
• cd9e5f6 ci(repo): Version packages (Core 2) (#7910)
• c15c8a2 fix(clerk-js): Add expired status to OrganizationInvitationStatus (release/co...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1672.