| 1 |
efrain |
1 |
# Changelog
|
|
|
2 |
|
|
|
3 |
## [6.10.0](https://github.com/firebase/php-jwt/compare/v6.9.0...v6.10.0) (2023-11-28)
|
|
|
4 |
|
|
|
5 |
|
|
|
6 |
### Features
|
|
|
7 |
|
|
|
8 |
* allow typ header override ([#546](https://github.com/firebase/php-jwt/issues/546)) ([79cb30b](https://github.com/firebase/php-jwt/commit/79cb30b729a22931b2fbd6b53f20629a83031ba9))
|
|
|
9 |
|
|
|
10 |
## [6.9.0](https://github.com/firebase/php-jwt/compare/v6.8.1...v6.9.0) (2023-10-04)
|
|
|
11 |
|
|
|
12 |
|
|
|
13 |
### Features
|
|
|
14 |
|
|
|
15 |
* add payload to jwt exception ([#521](https://github.com/firebase/php-jwt/issues/521)) ([175edf9](https://github.com/firebase/php-jwt/commit/175edf958bb61922ec135b2333acf5622f2238a2))
|
|
|
16 |
|
|
|
17 |
## [6.8.1](https://github.com/firebase/php-jwt/compare/v6.8.0...v6.8.1) (2023-07-14)
|
|
|
18 |
|
|
|
19 |
|
|
|
20 |
### Bug Fixes
|
|
|
21 |
|
|
|
22 |
* accept float claims but round down to ignore them ([#492](https://github.com/firebase/php-jwt/issues/492)) ([3936842](https://github.com/firebase/php-jwt/commit/39368423beeaacb3002afa7dcb75baebf204fe7e))
|
|
|
23 |
* different BeforeValidException messages for nbf and iat ([#526](https://github.com/firebase/php-jwt/issues/526)) ([0a53cf2](https://github.com/firebase/php-jwt/commit/0a53cf2986e45c2bcbf1a269f313ebf56a154ee4))
|
|
|
24 |
|
|
|
25 |
## [6.8.0](https://github.com/firebase/php-jwt/compare/v6.7.0...v6.8.0) (2023-06-14)
|
|
|
26 |
|
|
|
27 |
|
|
|
28 |
### Features
|
|
|
29 |
|
|
|
30 |
* add support for P-384 curve ([#515](https://github.com/firebase/php-jwt/issues/515)) ([5de4323](https://github.com/firebase/php-jwt/commit/5de4323f4baf4d70bca8663bd87682a69c656c3d))
|
|
|
31 |
|
|
|
32 |
|
|
|
33 |
### Bug Fixes
|
|
|
34 |
|
|
|
35 |
* handle invalid http responses ([#508](https://github.com/firebase/php-jwt/issues/508)) ([91c39c7](https://github.com/firebase/php-jwt/commit/91c39c72b22fc3e1191e574089552c1f2041c718))
|
|
|
36 |
|
|
|
37 |
## [6.7.0](https://github.com/firebase/php-jwt/compare/v6.6.0...v6.7.0) (2023-06-14)
|
|
|
38 |
|
|
|
39 |
|
|
|
40 |
### Features
|
|
|
41 |
|
|
|
42 |
* add ed25519 support to JWK (public keys) ([#452](https://github.com/firebase/php-jwt/issues/452)) ([e53979a](https://github.com/firebase/php-jwt/commit/e53979abae927de916a75b9d239cfda8ce32be2a))
|
|
|
43 |
|
|
|
44 |
## [6.6.0](https://github.com/firebase/php-jwt/compare/v6.5.0...v6.6.0) (2023-06-13)
|
|
|
45 |
|
|
|
46 |
|
|
|
47 |
### Features
|
|
|
48 |
|
|
|
49 |
* allow get headers when decoding token ([#442](https://github.com/firebase/php-jwt/issues/442)) ([fb85f47](https://github.com/firebase/php-jwt/commit/fb85f47cfaeffdd94faf8defdf07164abcdad6c3))
|
|
|
50 |
|
|
|
51 |
|
|
|
52 |
### Bug Fixes
|
|
|
53 |
|
|
|
54 |
* only check iat if nbf is not used ([#493](https://github.com/firebase/php-jwt/issues/493)) ([398ccd2](https://github.com/firebase/php-jwt/commit/398ccd25ea12fa84b9e4f1085d5ff448c21ec797))
|
|
|
55 |
|
|
|
56 |
## [6.5.0](https://github.com/firebase/php-jwt/compare/v6.4.0...v6.5.0) (2023-05-12)
|
|
|
57 |
|
|
|
58 |
|
|
|
59 |
### Bug Fixes
|
|
|
60 |
|
|
|
61 |
* allow KID of '0' ([#505](https://github.com/firebase/php-jwt/issues/505)) ([9dc46a9](https://github.com/firebase/php-jwt/commit/9dc46a9c3e5801294249cfd2554c5363c9f9326a))
|
|
|
62 |
|
|
|
63 |
|
|
|
64 |
### Miscellaneous Chores
|
|
|
65 |
|
|
|
66 |
* drop support for PHP 7.3 ([#495](https://github.com/firebase/php-jwt/issues/495))
|
|
|
67 |
|
|
|
68 |
## [6.4.0](https://github.com/firebase/php-jwt/compare/v6.3.2...v6.4.0) (2023-02-08)
|
|
|
69 |
|
|
|
70 |
|
|
|
71 |
### Features
|
|
|
72 |
|
|
|
73 |
* add support for W3C ES256K ([#462](https://github.com/firebase/php-jwt/issues/462)) ([213924f](https://github.com/firebase/php-jwt/commit/213924f51936291fbbca99158b11bd4ae56c2c95))
|
|
|
74 |
* improve caching by only decoding jwks when necessary ([#486](https://github.com/firebase/php-jwt/issues/486)) ([78d3ed1](https://github.com/firebase/php-jwt/commit/78d3ed1073553f7d0bbffa6c2010009a0d483d5c))
|
|
|
75 |
|
|
|
76 |
## [6.3.2](https://github.com/firebase/php-jwt/compare/v6.3.1...v6.3.2) (2022-11-01)
|
|
|
77 |
|
|
|
78 |
|
|
|
79 |
### Bug Fixes
|
|
|
80 |
|
|
|
81 |
* check kid before using as array index ([bad1b04](https://github.com/firebase/php-jwt/commit/bad1b040d0c736bbf86814c6b5ae614f517cf7bd))
|
|
|
82 |
|
|
|
83 |
## [6.3.1](https://github.com/firebase/php-jwt/compare/v6.3.0...v6.3.1) (2022-11-01)
|
|
|
84 |
|
|
|
85 |
|
|
|
86 |
### Bug Fixes
|
|
|
87 |
|
|
|
88 |
* casing of GET for PSR compat ([#451](https://github.com/firebase/php-jwt/issues/451)) ([60b52b7](https://github.com/firebase/php-jwt/commit/60b52b71978790eafcf3b95cfbd83db0439e8d22))
|
|
|
89 |
* string interpolation format for php 8.2 ([#446](https://github.com/firebase/php-jwt/issues/446)) ([2e07d8a](https://github.com/firebase/php-jwt/commit/2e07d8a1524d12b69b110ad649f17461d068b8f2))
|
|
|
90 |
|
|
|
91 |
## 6.3.0 / 2022-07-15
|
|
|
92 |
|
|
|
93 |
- Added ES256 support to JWK parsing ([#399](https://github.com/firebase/php-jwt/pull/399))
|
|
|
94 |
- Fixed potential caching error in `CachedKeySet` by caching jwks as strings ([#435](https://github.com/firebase/php-jwt/pull/435))
|
|
|
95 |
|
|
|
96 |
## 6.2.0 / 2022-05-14
|
|
|
97 |
|
|
|
98 |
- Added `CachedKeySet` ([#397](https://github.com/firebase/php-jwt/pull/397))
|
|
|
99 |
- Added `$defaultAlg` parameter to `JWT::parseKey` and `JWT::parseKeySet` ([#426](https://github.com/firebase/php-jwt/pull/426)).
|
|
|
100 |
|
|
|
101 |
## 6.1.0 / 2022-03-23
|
|
|
102 |
|
|
|
103 |
- Drop support for PHP 5.3, 5.4, 5.5, 5.6, and 7.0
|
|
|
104 |
- Add parameter typing and return types where possible
|
|
|
105 |
|
|
|
106 |
## 6.0.0 / 2022-01-24
|
|
|
107 |
|
|
|
108 |
- **Backwards-Compatibility Breaking Changes**: See the [Release Notes](https://github.com/firebase/php-jwt/releases/tag/v6.0.0) for more information.
|
|
|
109 |
- New Key object to prevent key/algorithm type confusion (#365)
|
|
|
110 |
- Add JWK support (#273)
|
|
|
111 |
- Add ES256 support (#256)
|
|
|
112 |
- Add ES384 support (#324)
|
|
|
113 |
- Add Ed25519 support (#343)
|
|
|
114 |
|
|
|
115 |
## 5.0.0 / 2017-06-26
|
|
|
116 |
- Support RS384 and RS512.
|
|
|
117 |
See [#117](https://github.com/firebase/php-jwt/pull/117). Thanks [@joostfaassen](https://github.com/joostfaassen)!
|
|
|
118 |
- Add an example for RS256 openssl.
|
|
|
119 |
See [#125](https://github.com/firebase/php-jwt/pull/125). Thanks [@akeeman](https://github.com/akeeman)!
|
|
|
120 |
- Detect invalid Base64 encoding in signature.
|
|
|
121 |
See [#162](https://github.com/firebase/php-jwt/pull/162). Thanks [@psignoret](https://github.com/psignoret)!
|
|
|
122 |
- Update `JWT::verify` to handle OpenSSL errors.
|
|
|
123 |
See [#159](https://github.com/firebase/php-jwt/pull/159). Thanks [@bshaffer](https://github.com/bshaffer)!
|
|
|
124 |
- Add `array` type hinting to `decode` method
|
|
|
125 |
See [#101](https://github.com/firebase/php-jwt/pull/101). Thanks [@hywak](https://github.com/hywak)!
|
|
|
126 |
- Add all JSON error types.
|
|
|
127 |
See [#110](https://github.com/firebase/php-jwt/pull/110). Thanks [@gbalduzzi](https://github.com/gbalduzzi)!
|
|
|
128 |
- Bugfix 'kid' not in given key list.
|
|
|
129 |
See [#129](https://github.com/firebase/php-jwt/pull/129). Thanks [@stampycode](https://github.com/stampycode)!
|
|
|
130 |
- Miscellaneous cleanup, documentation and test fixes.
|
|
|
131 |
See [#107](https://github.com/firebase/php-jwt/pull/107), [#115](https://github.com/firebase/php-jwt/pull/115),
|
|
|
132 |
[#160](https://github.com/firebase/php-jwt/pull/160), [#161](https://github.com/firebase/php-jwt/pull/161), and
|
|
|
133 |
[#165](https://github.com/firebase/php-jwt/pull/165). Thanks [@akeeman](https://github.com/akeeman),
|
|
|
134 |
[@chinedufn](https://github.com/chinedufn), and [@bshaffer](https://github.com/bshaffer)!
|
|
|
135 |
|
|
|
136 |
## 4.0.0 / 2016-07-17
|
|
|
137 |
- Add support for late static binding. See [#88](https://github.com/firebase/php-jwt/pull/88) for details. Thanks to [@chappy84](https://github.com/chappy84)!
|
|
|
138 |
- Use static `$timestamp` instead of `time()` to improve unit testing. See [#93](https://github.com/firebase/php-jwt/pull/93) for details. Thanks to [@josephmcdermott](https://github.com/josephmcdermott)!
|
|
|
139 |
- Fixes to exceptions classes. See [#81](https://github.com/firebase/php-jwt/pull/81) for details. Thanks to [@Maks3w](https://github.com/Maks3w)!
|
|
|
140 |
- Fixes to PHPDoc. See [#76](https://github.com/firebase/php-jwt/pull/76) for details. Thanks to [@akeeman](https://github.com/akeeman)!
|
|
|
141 |
|
|
|
142 |
## 3.0.0 / 2015-07-22
|
|
|
143 |
- Minimum PHP version updated from `5.2.0` to `5.3.0`.
|
|
|
144 |
- Add `\Firebase\JWT` namespace. See
|
|
|
145 |
[#59](https://github.com/firebase/php-jwt/pull/59) for details. Thanks to
|
|
|
146 |
[@Dashron](https://github.com/Dashron)!
|
|
|
147 |
- Require a non-empty key to decode and verify a JWT. See
|
|
|
148 |
[#60](https://github.com/firebase/php-jwt/pull/60) for details. Thanks to
|
|
|
149 |
[@sjones608](https://github.com/sjones608)!
|
|
|
150 |
- Cleaner documentation blocks in the code. See
|
|
|
151 |
[#62](https://github.com/firebase/php-jwt/pull/62) for details. Thanks to
|
|
|
152 |
[@johanderuijter](https://github.com/johanderuijter)!
|
|
|
153 |
|
|
|
154 |
## 2.2.0 / 2015-06-22
|
|
|
155 |
- Add support for adding custom, optional JWT headers to `JWT::encode()`. See
|
|
|
156 |
[#53](https://github.com/firebase/php-jwt/pull/53/files) for details. Thanks to
|
|
|
157 |
[@mcocaro](https://github.com/mcocaro)!
|
|
|
158 |
|
|
|
159 |
## 2.1.0 / 2015-05-20
|
|
|
160 |
- Add support for adding a leeway to `JWT:decode()` that accounts for clock skew
|
|
|
161 |
between signing and verifying entities. Thanks to [@lcabral](https://github.com/lcabral)!
|
|
|
162 |
- Add support for passing an object implementing the `ArrayAccess` interface for
|
|
|
163 |
`$keys` argument in `JWT::decode()`. Thanks to [@aztech-dev](https://github.com/aztech-dev)!
|
|
|
164 |
|
|
|
165 |
## 2.0.0 / 2015-04-01
|
|
|
166 |
- **Note**: It is strongly recommended that you update to > v2.0.0 to address
|
|
|
167 |
known security vulnerabilities in prior versions when both symmetric and
|
|
|
168 |
asymmetric keys are used together.
|
|
|
169 |
- Update signature for `JWT::decode(...)` to require an array of supported
|
|
|
170 |
algorithms to use when verifying token signatures.
|