fix: log error on invalid jwt (#1296)

.github/workflows/tests.yml

@@ -39,6 +39,12 @@ jobs:
         run: mix format --check-formatted
       - name: Credo checks
         run: mix credo
+      - name: Run hex audit
+        run: mix hex.audit
+      - name: Run mix_audit
+        run: mix mix_audit
+      - name: Run sobelow
+        run: mix sobelow --config .sobelow-conf
       - name: Retrieve PLT Cache
         uses: actions/cache@v1
         id: plt-cache

.sobelow-conf

@@ -0,0 +1,13 @@
+[
+  verbose: true,
+  private: false,
+  skip: false,
+  router: nil,
+  exit: :low,
+  format: "txt",
+  out: nil,
+  threshold: :medium,
+  ignore: ["Config.CSP", "Config.HTTPS"],
+  ignore_files: [],
+  version: false
+]

mix.exs

@@ -4,7 +4,7 @@ defmodule Realtime.MixProject do
   def project do
     [
       app: :realtime,
-      version: "2.34.21",
+      version: "2.34.20",
       elixir: "~> 1.17.3",
       elixirc_paths: elixirc_paths(Mix.env()),
       start_permanent: Mix.env() == :prod,
@@ -67,19 +67,20 @@ defmodule Realtime.MixProject do
       {:recon, "~> 2.5"},
       {:mint, "~> 1.4"},
       {:logflare_logger_backend, "~> 0.11"},
-      {:httpoison, "~> 1.8"},
       {:syn, "~> 3.3"},
       {:cachex, "~> 4.0"},
       {:open_api_spex, "~> 3.16"},
       {:corsica, "~> 2.0"},
       {:observer_cli, "~> 1.7"},
       {:mock, "~> 0.3", only: :test},
-      {:credo, "~> 1.7", only: [:dev, :test], runtime: false},
+      {:floki, ">= 0.30.0", only: :test},
       {:mint_web_socket, "~> 1.0", only: :test},
-      {:dialyxir, "~> 1.4", only: :dev, runtime: false},
-      {:benchee, "~> 1.1.0", only: :dev},
+      {:benchee, "~> 1.1.0", only: [:dev, :test]},
       {:excoveralls, "~> 0.18", only: [:dev, :test], runtime: false},
-      {:floki, ">= 0.30.0", only: :test}
+      {:sobelow, "~> 0.13", only: [:dev, :test], runtime: false},
+      {:mix_audit, "~> 2.1", only: [:dev, :test], runtime: false},
+      {:credo, "~> 1.7", only: [:dev, :test], runtime: false},
+      {:dialyxir, "~> 1.4", only: :dev, runtime: false}
     ]
   end