klapaudius/oauth2-php

Add OpenID Connect nonce and auth_time support
The "nonce" authorization request parameter is now accepted, bound to the
authorization code and exposed to token listeners through
OAuthTokenGrantedEvent::getNonce() so integrators can replay it in the
id_token.

An authentication timestamp stamped on the authorization code by the storage
is read back on the token request and exposed through
OAuthTokenGrantedEvent::getAuthTime(). It is a server-side value, never read
from the authorization request.

BC breaks for custom storages/models:

• IOAuth2GrantCode::createAuthCode() takes a 7th optional argument $nonce.
• IOAuth2AuthCode declares getNonce() and getAuthTime().

Full Changelog: 1.9.0...2.0.0

Add PSR-14 event dispatcher support for OIDC token hooks

Fix deprecation messages Implicitly marking parameter as nullable is deprecated, the explicit nullable type must be used instead

Fix deprecation messages Implicitly marking parameter as nullable is deprecated, the explicit nullable type must be used instead
Drop support of Symfony 3.x, Symfony 4.x, PHP 5.x, PHP 7.0

Use github action, remove travis, drop phpunit 4 support and support …