klapaudius/oauth-server-bundle

Bind OIDC nonce and auth_time to authorization codes

The OpenID Connect nonce of the authorization request and the end-user
authentication time are now carried on the auth code so integrators can
issue the "nonce" and "auth_time" claims in the id_token on the token
request.

• AuthCodeInterface gains setNonce()/setAuthTime(); AuthCode stores both
• Doctrine mappings (orm/mongodb/couchdb) gain nullable nonce and
    auth_time fields
• OAuthStorage::createAuthCode() accepts and persists the nonce
• The nonce survives the consent round-trip through a hidden form field
• auth_time is deliberately left for the application to stamp: only it
    knows when its user actually authenticated

Bugfix

#56 Incompatibility with upgrade to Symfony 8.1

What's Changed

• Wire event_dispatcher to OAuth server service
• update klapaudius/oauth2-php requirement to ~1.10

Fix undefined method calls in Symfony 8 #53 thanks @brpauwels

Full Changelog: 5.2.2...5.2.3

What's Changed

• PHP compatibility issue #52

What's Changed

• Fix deprecated xml loader for non-string resources by @brpauwels in #51

New Contributors

• @brpauwels made their first contribution in #51

Full Changelog: 5.2.0...5.2.1

Major Features

• Symfony 8 Support - Added full compatibility with Symfony 8 (#43)
• Doctrine ORM 3.6 Support - Upgraded from Doctrine ORM 2.2 to 3.6

Improvements

• Fixed deprecation warnings
• Enabled Dependabot for automated dependency updates
• Multiple CI/CD pipeline improvements and fixes

Dependency Updates

Composer:

• symfony/class-loader: ^2.0 → ^3.4
• doctrine/orm: ~2.2 → ~3.6
• phpstan/phpstan-phpunit: ^1.0 → ^2.0

GitHub Actions:

• actions/checkout: v4 → v6
• actions/cache: v3 → v5
• php-actions/phpunit: v3 → v4

fix RuntimeException - missing param in controller

• fix error when running 'bin/console lint:container' #38
• Use nullsafe getUser() operator in AuthorizeController #40 thanks to @rimas-kudelis

Use nullsafe getUser() operator in AuthorizeController #40 thanks to @rimas-kudelis