guzzlehttp/oauth-subscriber

• Dropped support for PHP 7.2 and 7.3
• Require guzzlehttp/guzzle ^8.0, guzzlehttp/promises ^3.0, and guzzlehttp/psr7 ^3.0
• Escape unsafe configuration values in generated OAuth exceptions
• Reject native PHP serialization of Oauth1
• Reject non-finite float values in OAuth parameters
• Added native return types to the OAuth middleware entry point
• Improved PHPDoc for OAuth config arrays and middleware handler contracts
• Trim Content-Type media types with HTTP optional whitespace when signing
• Hide sensitive OAuth arguments in stack traces on PHP 8.2+

• Dropped support for PHP 7.2 and 7.3
• Require guzzlehttp/guzzle ^8.0, guzzlehttp/promises ^3.0, and guzzlehttp/psr7 ^3.0
• Escape unsafe configuration values in generated OAuth exceptions
• Reject native PHP serialization of Oauth1
• Reject non-finite float values in OAuth parameters
• Added native return types to the OAuth middleware entry point
• Improved PHPDoc for OAuth config arrays and middleware handler contracts
• Trim Content-Type media types with HTTP optional whitespace when signing
• Hide sensitive OAuth arguments in stack traces on PHP 8.2+

• Require guzzlehttp/guzzle ^7.15 and guzzlehttp/psr7 ^2.13
• Use locale-independent ASCII case folding for signature base string inputs

• Require guzzlehttp/guzzle ^7.15 and guzzlehttp/psr7 ^2.13
• Use locale-independent ASCII case folding for signature base string inputs

• Require guzzlehttp/guzzle ^7.13.3 and guzzlehttp/psr7 ^2.12.4
• Pass explicit trim characters ahead of the PHP 8.6 trim default change

• Require guzzlehttp/guzzle ^7.13.3 and guzzlehttp/psr7 ^2.12.4
• Pass explicit trim characters ahead of the PHP 8.6 trim default change

• Require guzzlehttp/guzzle ^7.12.3 and guzzlehttp/psr7 ^2.12.3
• Fixed form body signing for parameterized and case-insensitive content types

• Require guzzlehttp/guzzle ^7.12.3 and guzzlehttp/psr7 ^2.12.3
• Fixed form body signing for parameterized and case-insensitive content types

• Fixed non-finite float values emitting coercion warnings on PHP 8.5

• Fixed non-finite float values emitting coercion warnings on PHP 8.5

• Require guzzlehttp/guzzle ^7.11, guzzlehttp/psr7 ^2.11

• Require guzzlehttp/guzzle ^7.11, guzzlehttp/psr7 ^2.11

• Added support for PHP 8.5
• Added support for per-request token and token_secret overrides
• Convert RSA signing failures to runtime exceptions
• Fixed OAuth parameter normalization for duplicate parameter values
• Sign bare query and form parameters as empty values

• Added support for PHP 8.5
• Added support for per-request token and token_secret overrides
• Convert RSA signing failures to runtime exceptions
• Fixed OAuth parameter normalization for duplicate parameter values
• Sign bare query and form parameters as empty values

• Fixed signature generation when request body or query parameters include oauth_signature
• Validate RSA private key configuration before signing

• Fixed signature generation when request body or query parameters include oauth_signature
• Validate RSA private key configuration before signing

See change log for changes.

Includes fix for GHSA-237r-r8m4-4q88.

• Fixed insufficient nonce entropy (CVE-2025-21617)

See change log for changes.

• Adjusted some method modifiers and added return types
• Fixed signature generation with duplicate query parameters

• Dropped support for HHVM and PHP <7.2.5
• Dropped support for Guzzle 6.x and PSR-7 1.x
• Added support for PHP 8.1, 8.2, 8.3, 8.4
• Add param types to various methods

• Added support for guzzlehttp/psr7:^2.0

• Add oauth_body_hash parameter to authorization header
• Do not require token_secret for 2-legged authentication
• Added HMAC-SHA256 support
• Added ext-openssl suggest
• Added PHP 8 Support

• Allow guzzle 7

• Updated to work with Guzzle 6 as a middleware