steverhoades/oauth2-openid-connect-server

What's Changed

• use keyIdentifier class param by @drjosephbaxter in #62

New Contributors

• @drjosephbaxter made their first contribution in #62

Full Changelog: v3.0.0...v3.0.1

Please note that this is a breaking change release. Support for PHP versions < 7.4 have been dropped with this release. These versions are long outside LTS.

What's Changed

• Migrate the CI setup to GitHub Actions by @stof in #58
• Allow league/oauth2-server 9.x by @stof in #57
• Fix CI setup by @stof in #60
• Document the return type of IdentityProviderInterface by @stof in #59
• Added kid header in id token by @DarthLegiON in #56

New Contributors

• @stof made their first contribution in #58
• @DarthLegiON made their first contribution in #56
• @ajimoti made their first contribution in #45

Full Changelog: v2.6.1...v3.0.0

What's Changed

• Update IdTokenResponse.php by @xterr in #54

New Contributors

• @xterr made their first contribution in #54

Full Changelog: v2.6.0...v2.6.1

Allow lcobucci/jwt ^4.3 and ^5.0
Thanks to @bojanbogdanovic

Includes support for lcobucci/jwt ^4.2

• Upgrades to lcobucci\jwt version 4.1.5 which fixes a vulnerability reported by Dependabot. (Good bot!).
• Removes support for prior (vulnerable) versions of lcobucci\jwt.

Replace the deprecated Zend Framework with Laminas Framework

Support private key pass phrase for InMemory keys.

• Adds support for in-memory private keys

I've marked this as a 2.0 release due to the potential for BC breaks. This release adds support for PHP 8 as well as lcobucci/jwt ^4.1.