2.1.0

What's Changed

• Adding well-known configuration and JWKS routes in Laravel by @GewoonYorick in #12

New Contributors

• @GewoonYorick made their first contribution in #12

Full Changelog: 2.0.8...2.1.0

Support Laravel 11

What's Changed

• Laravel 11 Composer JSON update by @DellanX in #11

New Contributors

• @DellanX made their first contribution in #11

Full Changelog: 2.0.7...2.0.8

2.0.7

What's Changed

• fix: use microtime() instead of time() when microseconds should be used by @TECHNOFAB11 in #5
• Use private key contents instead of key path by @georgeboot in #7

New Contributors

• @TECHNOFAB11 made their first contribution in #5
• @georgeboot made their first contribution in #7

Full Changelog: 2.0.5...2.0.7

2.0.6

Fixed

• Fix issue with the time format into microseconds (or not)

2.0.5

Changed

This update adds a new configuration variable use_microseconds. It defaults to true even if it does not exist so that it does not break backwards compatibility. If you set it to false the DateTimeImmutable object that we pass to issuedAt() & expiresAt() will be built without microseconds.

By removing the microseconds from the DateTimeImmutable object, we are letting the lcobucci/jwt package know that we want an int and not a float. You can see this logic in the MicrosecondBasedDateConversion class that lcobucci/jwt uses to covert all RegisteredClaims::DATE_CLAIMS.

The reason that I think this is need this is because the specification can be interpreted as calling for seconds and not seconds with microseconds. The description for "iat" (Issued At) Claim calls for a "NumericDate value" which is defined at the bottom of the Terminology section. That definition even links to IEEE Std 1003.1, 2013 Edition, 2013 which clearly notes, "The divisions in the formula are integer divisions; that is,

2.0.4

Changed

• Add ability to specify Header to be returned

Fix test suite

Fixes

• Fix the test suits

Thanks to coffe4u

Fix version lbocucci for older system

Update composer.json

Allow lboccui 4.0

Upgrade jwt version

Merge pull request #1 from coffe4u/update-lcobucci-jwt-requirement

Require lcobucci/jwt at least 4.3 and allow 5

2.0.0

Full Changelog: 1.1.0...2.0.0