Releases: firebase/php-jwt
Releases · firebase/php-jwt
v5.5.0
!!IMPORTANT!!
The recommended usage of this library has changed.
A Key object should now be used as the second argument to JWT::decode
instead of using the
allowed_algs
array. This will prevent key/algorithm type confusion:
// Previous way to call "decode"
Firebase\JWT\JWT::decode($jwt, $publicKey, ['RS256']);
// New (safer) way to call "decode"
$key = new Firebase\JWT\Key($publicKey, 'RS256');
Firebase\JWT\JWT::decode($jwt, $key);
Please see #351 for more information on the issue, and #365 for the merged changes.
The README
has also been updated to reflect the new usage.
v5.4.0
v5.3.0
v5.2.1
v5.2.0
v5.1.0
v5.0.0 / 2017-06-27
Changelog:
- Support RS384 and RS512.
See #117. Thanks @joostfaassen! - Add an example for RS256 openssl.
See #125. Thanks @akeeman! - Detect invalid Base64 encoding in signature.
See #162. Thanks @psignoret! - Update
JWT::verify
to handle OpenSSL errors.
See #159. Thanks @bshaffer! - Add
array
type hinting todecode
method
See #101. Thanks @hywak! - Add all JSON error types.
See #110. Thanks @gbalduzzi! - Bugfix 'kid' not in given key list.
See #129. Thanks @stampycode! - Miscellaneous cleanup, documentation and test fixes.
See #107, #115, #160, #161, and #165. Thanks @akeeman, @chinedufn, and @bshaffer!