Add behaviour for base64url about erlang-jose

[potatosalad]

@doughsay Yes, I'll have a new release out soon.

In the meantime, you should be able to override the dependency in your mix.exs file:

{:base64url, "1.0.1", override: true},

[Qqwy]

Would there be any reason to keep the dependency, now that Elixir provides this itself?

[victorolinasc]

@Qqwy just giving my opinion here: JOSE is used a lot on other BEAM languages too. Perhaps, what would make more sense is to update the base64url library with the generated Base version from Elixir.

@potatosalad if that makes sense I could try to make this PR (updating the base64url dep). Thoughts?

[Qqwy]

@Qqwy just giving my opinion here: JOSE is used a lot on other BEAM languages too. Perhaps, what would make more sense is to update the base64url library with the generated Base version from Elixir.

Regardless of what BEAM language is using JOSE, when compiled, JOSE will include a compiled version of the Elixir standard library, so Base will be included, therefore making the base64url dependency superfluous, right?

[victorolinasc]

@Qqwy I think it is quite possible to compile JOSE without Elixir. I haven't looked deep enough to be sure, but when using it as a dependency in a purely rebar project or using erlang.mk it does not "mandate" Elixir to be present. Not sure and maybe I'm just saying nonsense here... Sorry for the noise otherwise!

[Qqwy]

@victorolinasc You might very well be right; I mistakenly thought all of JOSE was written in Elixir, but this is not true: there is an Elixir wrapper (in lib), but the base library is written in Erlang (in src).

👍 Thank you for correcting me!

[potatosalad]

I'm experimenting with bundling jose_base64 and jose_base64url modules with jose itself on the develop branch.

I think bundling a deterministic JSON encoder/decoder would also be wise so that the project is a little closer to zero dependency.

[doughsay]

Any progress on this?

Because jose 1.9.0 still depends on base64url 0.0.1, we are forced to manually install rebar2 in our build process just for this one dependency. Can we at least get a release of jose that uses base64url 1.0.1 so we can stop using rebar2?

Thanks!