All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning
- Bumped
actions/checkoutfrom v5 to v6 in all CI workflows - Added
ciprofile to docker-compose matrix services to avoid starting them during local development - Fixed
test:coveragetask to run via docker-compose withXDEBUG_MODE=coverage - Fixed
test:runto remove stalecomposer.lockbeforecomposer update - Fixed
test:matrix:resetto use--profile ciflag - Removed unused
.markdownlint.json
4.1.0 - 2026-03-20
- Achieved 100% test coverage (methods and lines)
- Fixed JWKS verification keys not being persisted to cache
- Documented JWT::$leeway static property limitation and exp claim validation
4.0.3 - 2026-03-09
- Upgraded PHPUnit from 11 to 12, Updated
phpunit.xml.distschema to 12.5 - Upgraded
firebase/php-jwtto 7.* to fix security vulnerability.
4.0.2 - 2025-10-06
- Handled an array of audiences on ID token.
4.0.1 - 2025-01-13
- Fix create release action
4.0.0 - 2025-01-11
- Removed support for PHP 8.1 and 8.2 (BC)
- Changed from Psalm to PHPStan
- Upgrade to PHPUnit 11
- Add Github action to auto create releases
3.2.1 - 2023-09-18
- Fixed "Return value of JWT::getKey() must be an instance of Firebase\JWT\Key" error
3.2.0 - 2023-09-11
- Updated
firebase/php-jwtto 6.8 - Updated
vimeo/psalmto 5.x - Update to latest github actions
- Add PHP 8.2 to list of tested versions
- Add changelog check to github actions
3.1.0 - 2023-07-03
- Added support for Authorization Code Flow
- Add missing direct dependency on
psr/http-client
3.0.0 - 2021-12-08
- Dropped support for PHP 7.3
- Changed leeway to be a config option for providers [BC]
- Fixed coverage for test suite
2.3.0 - 2021-12-08
- Include metadata url in cache key (to support multiple providers).
2.2.0 - 2021-09-28
- Function to get the logout / end session url from the config metadata
- Updated CHANGELOG
- Added badges to Readme
- Update validation example in README
- Fixed composer scripts
2.1.0 - 2021-06-14
- Leeway option when validating id token
2.0.0 - 2021-06-04
- Fixed security issue, where token was not validated against the signing keys
- Test suite
- Psalm setup for static analysis
- Code formatting
- Switched to PSR-6 caching
1.0.0 - 2021-03-12
- README
- LICENSE
- OpenId-Connect: Added OpenIdConfigurationProvider
- PHP-CS-Fixer
- This CHANGELOG file to hopefully serve as an evolving example of a standardized open source project CHANGELOG.