Releases: firebase/php-jwt
Releases · firebase/php-jwt
v5.5.1
v5.5.0
!!IMPORTANT!!
The recommended usage of this library has changed.
A Key object should now be used as the second argument to JWT::decode instead of using the
allowed_algs array. This will prevent key/algorithm type confusion:
// Previous way to call "decode"
Firebase\JWT\JWT::decode($jwt, $publicKey, ['RS256']);
// New (safer) way to call "decode"
$key = new Firebase\JWT\Key($publicKey, 'RS256');
Firebase\JWT\JWT::decode($jwt, $key);Please see #351 for more information on the issue, and #365 for the merged changes.
The README has also been updated to reflect the new usage.
v5.4.0
v5.3.0
v5.2.1
v5.2.0
v5.1.0
v5.0.0 / 2017-06-27
Changelog:
- Support RS384 and RS512.
See #117. Thanks @joostfaassen! - Add an example for RS256 openssl.
See #125. Thanks @akeeman! - Detect invalid Base64 encoding in signature.
See #162. Thanks @psignoret! - Update
JWT::verifyto handle OpenSSL errors.
See #159. Thanks @bshaffer! - Add
arraytype hinting todecodemethod
See #101. Thanks @hywak! - Add all JSON error types.
See #110. Thanks @gbalduzzi! - Bugfix 'kid' not in given key list.
See #129. Thanks @stampycode! - Miscellaneous cleanup, documentation and test fixes.
See #107, #115, #160, #161, and #165. Thanks @akeeman, @chinedufn, and @bshaffer!