ERR_REQUIRE_ESM with jose 6.x - postman-runtime compatibility

[hwangja1019]

Newman fails with ERR_REQUIRE_ESM when jose 6.x is installed due to postman-runtime trying to require() an ES module.

Error Location:
postman-runtime/lib/authorizer/asap.js:1:12

Current Behavior:

• Compatibility issue using jose 6.x.
  C:...node_modules\postman-runtime\lib\authorizer\asap.js:1
  var jose = require('jose'),
  Error [ERR_REQUIRE_ESM]: require() of ES Module C:...node_modules\jose\dist\webapi\index.js from C:...node_modules\postman-runtime\lib\authorizer\asap.js not supported.
  Instead change the require of index.js in C:...node_modules\postman-runtime\lib\authorizer\asap.js to a dynamic import() which is available in all CommonJS modules.

Expected Behavior
Newman tests to run successfully

Impact:

• Prevents Newman from running in projects using jose 6.x
• Affects CI/CD pipelines using Newman for API testing

Environment:

• Newman version: 6.2.1
• Node.js version: 18.20.4
• OS: Windows

Suggested Fix:
Update postman-runtime to use dynamic import() for jose

[hyperlinken]

Hi, I tried contributing to postman-runtime, but I ran into issues with the jose dependency.

I tried replacing require('jose') with dynamic await import('jose'), but that led to a different issue since import() is asynchronous, and the asap.js code expects synchronous behavior, it caused runtime errors.

Error: Can't walk dependency graph: Cannot find module 'C:...\postman-runtime\node_modules\jose\dist\browser\bundle.js' from 'C:\Users\ravij\OneDrive\Documents\VScode\conti two\postman-runtime\lib\authorizer\jwt.js'
required by C:...\postman-runtime\lib\authorizer\jwt.js
at C:...\postman-runtime\node_modules\resolve\lib\async.js:167:35
at load (C:...\postman-runtime\node_modules\resolve\lib\async.js:186:43)
at onex (C:...\postman-runtime\node_modules\resolve\lib\async.js:211:17)
at C:...\postman-runtime\node_modules\resolve\lib\async.js:24:69
at FSReqCallback.oncomplete (node:fs:199:21) {
code: 'MODULE_NOT_FOUND',

i also try downgrading version 6.0 ,version 5, all have same error.
i conclude the jose library transitioned from CommonJS to pure ESM

i also tried version jose@4.14.4 because that’s the last CommonJS-compatible version. It can be loaded via require(). btw it passes all the test but lacks newer APIs like : importPKCS8()

so it gives issue like : 308 passing (828ms)
10 pending
10 failing

                              1) Auth Handler:
                                   asap
                                     should add the Auth header for RS256 algorithm:
                                 TypeError: jose.importPKCS8 is not a function
                                  at Object.sign (lib\authorizer\asap.js:46:1091)
                                  at Context.<anonymous> (test\unit\auth-handlers.test.js:3299:25)
                                  at process.processImmediate (node:internal/timers:478:21)

                               ..............