firebase/php-jwt

A simple library to encode and decode JSON Web Tokens (JWT) in PHP. Should conform to the current spec.

v7.1.0 501M downloads/mo #108 most downloaded on composer googleapis/php-jwt

What this package is like to depend on

Last release 2 months ago

11 Jun 2026

Ships fairly regularly

a new release about every 2 months

Some releases are documented

notes for 21 of 41 stable releases

Nothing withdrawn

no release was ever pulled

12 years old

41 releases · first in 2014

7 releases in the last 12 months

see the full history below

Release timeline

41 releases · Aug 2014 to Jun 2026

2015 2017 2019 2021 2023 2025

Release Pre-release

Releases

latest 41

v7.1.0 11 Jun 2026
Release notes
7.1.0 (2026-06-11)

Features
- Add support for PS256 (#637) (aa0b447)
Bug Fixes
- Skip parsing valid unsupported curves (#638) (8a6c2a7)
- Update homepage URL in composer.json (#635) (f7ae571)
- Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)
Open source →
Release notes
Features
- Add support for PS256 (#637) (aa0b447)
Bug Fixes
- Skip parsing valid unsupported curves (#638) (8a6c2a7)
- Update homepage URL in composer.json (#635) (f7ae571)
- Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)
Open source →
v7.0.5 01 Apr 2026
Release notes
7.0.5 (2026-03-31)

Bug Fixes
- RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)
Open source →
Release notes
Bug Fixes
- RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)
Open source →
v7.0.4 27 Mar 2026
Release notes
7.0.4 (2026-03-27)

Bug Fixes
- readme examples, add tests for all examples (#626) (510a00c)
- use urlsafeB64Decode everywhere (#627) (b889495)
Open source →
Release notes
Bug Fixes
- readme examples, add tests for all examples (#626) (510a00c)
- use urlsafeB64Decode everywhere (#627) (b889495)
Open source →
v7.0.3 25 Feb 2026
Release notes
7.0.3 (2026-02-18)

Miscellaneous Chores
- add environment for Release Please job (#619) (300fd02)
Open source →
Release notes
Miscellaneous Chores
- add environment for Release Please job (#619) (300fd02)
Open source →
v7.0.2 16 Dec 2025
Release notes
7.0.2 (2025-12-16)

Bug Fixes
- add key length validation for ec keys (#615) (7044f9a)
Open source →
Release notes
Bug Fixes
- add key length validation for ec keys (#615) (7044f9a)
Open source →
v7.0.1 15 Dec 2025
Release notes
Bug Fixes
- remove resource support (#612)
Open source →
v7.0.0 15 Dec 2025
Release notes
7.0.0 (2025-12-15)

⚠️ ⚠️ ⚠️ Security Fixes ⚠️ ⚠️ ⚠️
- add key size validation (#613) (6b80341)
  NOTE: This fix will cause keys with a size below the minimally allowed size to break.
Features
- add SensitiveParameter attribute to security-critical parameters (#603) (4dbfac0)
- store timestamp in ExpiredException (#604) (f174826)
Bug Fixes
- validate iat and nbf on payload (#568) (953b2c8)
Open source →
Release notes
⚠️ ⚠️ ⚠️ Security Fixes ⚠️ ⚠️ ⚠️
- add key size validation (#613) (6b80341) NOTE: This fix will cause keys with a size below the minimally allowed size to break.
Features
- add SensitiveParameter attribute to security-critical parameters (#603) (4dbfac0)
- store timestamp in ExpiredException (#604) (f174826)
Bug Fixes
- validate iat and nbf on payload (#568) (953b2c8)
Open source →
v6.11.1 09 Apr 2025
Release notes
6.11.1 (2025-04-09)

Bug Fixes
- update error text for consistency (#528) (c11113a)
Open source →
Release notes
Bug Fixes
- update error text for consistency (#528) (c11113a)
Open source →
v6.11.0 23 Jan 2025
Release notes
6.11.0 (2025-01-23)

Features
- support octet typed JWK (#587) (7cb8a26)
Bug Fixes
- refactor constructor Key to use PHP 8.0 syntax (#577) (29fa2ce)
Open source →
Release notes
Features
- support octet typed JWK (#587) (7cb8a26)
Bug Fixes
- refactor constructor Key to use PHP 8.0 syntax (#577) (29fa2ce)
Open source →
v6.10.2 24 Nov 2024
Release notes
6.10.2 (2024-11-24)

Bug Fixes
- Mitigate PHP8.4 deprecation warnings (#570) (76808fa)
- support php 8.4 (#583) (e3d68b0)
Open source →
Release notes
Bug Fixes
- Mitigate PHP8.4 deprecation warnings (#570) (76808fa)
- support php 8.4 (#583) (e3d68b0)
Open source →
v6.10.1 18 May 2024
Release notes
Bug Fixes
- ensure ratelimit expiry is set every time (#556) (09cb208)
- ratelimit cache expiration (#550) (dda7250)
Open source →
v6.10.0 01 Dec 2023
Release notes
Features
- allow typ header override (#546) (79cb30b)
Open source →
v6.9.0 05 Oct 2023
Release notes
Features
- add payload to jwt exception (#521) (175edf9)
Open source →
v6.8.1 14 Jul 2023
Release notes
Bug Fixes
- accept float claims but round down to ignore them (#492) (3936842)
- different BeforeValidException messages for nbf and iat (#526) (0a53cf2)
Open source →
v6.8.0 20 Jun 2023
Release notes
Features
- add support for P-384 curve (#515) (5de4323)
Bug Fixes
- handle invalid http responses (#508) (91c39c7)
Open source →
v6.7.0 14 Jun 2023
Release notes
Features
- add ed25519 support to JWK (public keys) (#452) (e53979a)
Open source →
v6.6.0 13 Jun 2023
Release notes
Features
- allow get headers when decoding token (#442) (fb85f47)
Bug Fixes
- only check iat if nbf is not used (#493) (398ccd2)
Open source →
v6.5.0 12 May 2023
Release notes
Bug Fixes
- allow KID of '0' (#505) (9dc46a9)
Miscellaneous Chores
- drop support for PHP 7.3 (#495)
Open source →
v6.4.0 09 Feb 2023
Release notes
Features
- add support for W3C ES256K (#462) (213924f)
- improve caching by only decoding jwks when necessary (#486) (78d3ed1)
Open source →
v6.3.2 19 Dec 2022
Release notes
Bug Fixes
- check kid before using as array index (bad1b04)
Open source →
v6.3.1 01 Nov 2022
Release notes
Bug Fixes
- casing of GET for PSR compat (#451) (60b52b7)
- string interpolation format for php 8.2 (#446) (2e07d8a)
Open source →
v6.3.0 15 Jul 2022

Nothing published for this version
v6.2.0 13 May 2022

Nothing published for this version
v6.1.2 21 Apr 2022

Nothing published for this version
v6.1.1 13 Apr 2022

Nothing published for this version
v6.1.0 23 Mar 2022

Nothing published for this version
v6.0.0 24 Jan 2022

Nothing published for this version
v5.5.1 08 Nov 2021

Nothing published for this version
v5.5.0 04 Nov 2021

Nothing published for this version
v5.4.0 23 Jun 2021

Nothing published for this version
v5.3.0 20 May 2021

Nothing published for this version
v5.2.1 12 Feb 2021

Nothing published for this version
v5.2.0 25 Mar 2020

Nothing published for this version
v5.1.0 24 Feb 2020

Nothing published for this version
v5.0.0 27 Jun 2017

Nothing published for this version
v4.0.0 18 Jul 2016

Nothing published for this version
v3.0.0 22 Jul 2015

Nothing published for this version
v2.2.0 22 Jun 2015

Nothing published for this version
v2.1.0 20 May 2015

Nothing published for this version
2.0.0 01 Apr 2015

Nothing published for this version
1.0.0 28 Aug 2014

Nothing published for this version

firebase/php-jwt

What this package is like to depend on

Release timeline

Releases

7.1.0 (2026-06-11)

Features

Bug Fixes

Features

Bug Fixes

7.0.5 (2026-03-31)

Bug Fixes

Bug Fixes

7.0.4 (2026-03-27)

Bug Fixes

Bug Fixes

7.0.3 (2026-02-18)

Miscellaneous Chores

Miscellaneous Chores

7.0.2 (2025-12-16)

Bug Fixes

Bug Fixes

Bug Fixes

7.0.0 (2025-12-15)

⚠️ ⚠️ ⚠️ Security Fixes ⚠️ ⚠️ ⚠️

Features

Bug Fixes

⚠️ ⚠️ ⚠️ Security Fixes ⚠️ ⚠️ ⚠️

Features

Bug Fixes

6.11.1 (2025-04-09)

Bug Fixes

Bug Fixes

6.11.0 (2025-01-23)

Features

Bug Fixes

Features

Bug Fixes

6.10.2 (2024-11-24)

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Bug Fixes

Every package, every release, already written down.