php-open-source-saver/jwt-auth

What's Changed

• Scope tymon.jwt instance to resolve Laravel Octane persistence. by @yoramdelangen in #301

New Contributors

• @yoramdelangen made their first contribution in #301

Full Changelog: 2.9.2...v2.9.3

What's Changed

• fix: Prevent null pointer when provider cannot find a user for a token by @NielsJanssen in #300

Full Changelog: 2.9.1...2.9.2

What's Changed

• feat: Trigger Authenticated event when loading user from token by @NielsJanssen in #298

New Contributors

• @NielsJanssen made their first contribution in #298

Full Changelog: v2.9.0...2.9.1

What's Changed

• Updating composer and CI for Laravel 13 by @specialtactics in #297

Full Changelog: v2.8.3...v2.9.0

Please see (https://github.com/PHP-Open-Source-Saver/jwt-auth/releases/tag/2.9.0)

Added

• Updating composer and CI for Laravel 13

What's Changed

• Implement config variable to allow iat to remain unchanged claim when refreshing a token by @robinnydahl in #269

New Contributors

• @robinnydahl made their first contribution in #269

Full Changelog: v2.8.2...v2.8.3

Please see (https://github.com/PHP-Open-Source-Saver/jwt-auth/releases/tag/2.8.3)

Fixed

• Implement config variable to allow iat to remain unchanged claim when refreshing a token

What's Changed

• Fix PHPStan Issues by @jonkerw85 in #291

Full Changelog: v2.8.1...v2.8.2

Please see (https://github.com/PHP-Open-Source-Saver/jwt-auth/releases/tag/2.8.2)

Fixed

• Fix PHPStan Issues

What's Changed

• Fixed the return type of getMinutesUntilExpired in BlackList, which returned a float instead of an int when using Carbon v2 by @jonkerw85 in #286

New Contributors

• @jonkerw85 made their first contribution in #286

Please see (https://github.com/PHP-Open-Source-Saver/jwt-auth/releases/tag/2.8.1)

Fixed

• Fixed the return type of getMinutesUntilExpired in BlackList, which returned a float instead of an int when using Carbon v2.

What's Changed

• Fix Carbon not accepting string values by @mokhosh in #272
• don't show jwt secret if show option is false even if the key is updated by @kbiits in #275
• Override "id" method in JWTGuard by @mabdullahsari in #278
• Updates for Laravel 12 by @specialtactics in #279

New Contributors

• @mokhosh made their first contribution in #272
• @kbiits made their first contribution in #275
• @mabdullahsari made their first contribution in #278

Full Changelog: 2.7.3...2.8.0

Please see (https://github.com/PHP-Open-Source-Saver/jwt-auth/releases/tag/2.8.0)

Added

• #268 Implement config variable to allow iat to remain unchanged claim when refreshing a token
• Adds support for Laravel 12
• Adds CI testing for PHP 8.4
• Don't show jwt secret if show option is false even if the key is updated
• Casts config ints to int by default in new config file publishes
• Override "id" method in JWTGuard

Removed

• Dropping support for PHP 8.1, if you are still on this version, please update your PHP version in order to use the latest version of this package.

What's Changed

• Update phpstan/phpstan requirement from ^1 to ^2 by @dependabot in #273

Full Changelog: 2.7.2...2.7.3

What's Changed

• Add config to set auth cookie key name by @leoralph in #266

New Contributors

• @leoralph made their first contribution in #266

Full Changelog: 2.7.1...2.7.2

Added

• Add cookie_key_name config to customize cookie name for authentication
• Delegate Auth::id() calls to the newly added getUserId method

Fixed

• Support for Carbon 3 alongside Carbon 2

Added

• New getUserId method

Added

• Refresh iat claim when refreshing a token

Added

• Support for lcobucci/jwt^5.0 (and dropped support for ^4.0)
• SetSecret regenerates config with new secret in the Lcobucci provider

Added

• Support for Carbon 3 (and drop Carbon 1, but it was unused anyway)

Removed

• Dropped support for Laravel < 10 and PHP < 8.1

Fixed

• Use id claim for identify user if sub doesn't exists.

Added

• Different TTL configurations for each guard
• lcobucci/jwt: add array support for aud claim
• Laravel 11 support

Added

• Laravel 10 support

• No changes to 2.0.0-RC1

Added

• Arabic translation for docs by hawkiq

Added

• Adds Octane Compatibility
• Added ask-passphrase parameter to generating certs command
• Support autocomplete guard

Fixed

• Default config value for show_black_list_exception changed to true
• Auth header not ignoring other auth schemes
• Fixed replacing of values using regex

Added

• Added exception if secret key or private/public key are missing

Fixed

• Add command for generating certs

Fixed

• Add more ReturnTypeWillChange for PHP 8.1 compatibility

Added

Fixed

• Fixes #101 - Secret is not nullable but should be according to the library config boilerplate
• Fixes #99 - Steps for migrating from tymons package

Added

• PHP 8.1 support (#58, #77, #87)
• Typed variables (#52)

Fixed

• Compatability with Laravel 6 versions below 6.15

Added

• Dispatch Auth Events by @okaufmann in #45

Changed

• Blacklisted token exception no more thrown by default by @Messhias in #32

Fixed

• ECDSA signers by @josecl in #31

Added

• PHP 8.0 and lcobucci/jwt version 4 compatability by @eschricker in #14
• Option to hide Blacklisted Token exception by @Messhias in #7
• Throw exception for invalid encrypted cookies by @eschricker in #22

Fixed

• Typo in tests by @eschricker in #23