Auth Bundle Laravel Package

What's Changed

• Resolve deprecations for Symfony 8 by @marforon in https://github.com/anzusystems/auth-bundle/pull/29

Full Changelog: https://github.com/anzusystems/auth-bundle/compare/4.4.0...5.0.0

• Upgrade lcobucci/jwt to v5

What's Changed

• Add support for impersonation user by @pulzarraider in https://github.com/anzusystems/auth-bundle/pull/26

Full Changelog: https://github.com/anzusystems/auth-bundle/compare/4.2.0...4.3.0

What's Changed

• Allow to use common-bundle 10.0 by @pulzarraider in https://github.com/anzusystems/auth-bundle/pull/25

Full Changelog: https://github.com/anzusystems/auth-bundle/compare/4.1.1...4.2.0

• OAuth2 exception loggin improvments.
• Fixed for wrong credentials format in ApiTokenAuthenticator.

What's Changed

• Add AuthTargetUrlEvent, sameSite cookie option, fix deprecations by @pulzarraider in https://github.com/anzusystems/auth-bundle/pull/23

Full Changelog: https://github.com/anzusystems/auth-bundle/compare/4.0.0...4.1.0

• Upgrate to anzusystems/common-bundle v9

Fix conflicting access token cache for fetching user info from SSO

1. Require PHP8.3 and add server timestamp to login redirect

Allow to fetch user info by user email from sso.

• Allow to use common-bundle 8.0

What's Changed

• Update to common-bundle 7.0 (with anzusystems/serializer-bundle 4.0) by @pulzarraider in https://github.com/anzusystems/auth-bundle/pull/17

Read the UPGRADE.md if you want to update to this version.

Full Changelog: https://github.com/anzusystems/auth-bundle/compare/1.6.0...2.0.0

• Allow anzusystems/common-bundle v6

• Add support for anzusystems/common-bundle ^5.0

• Add support for common-bundle ^4.0.
• Upgrade PHP to 8.3
• Upgrade Psalm to ^5.0

Changes/Added:

• allow to specify empty domain for cookies to create the cookies for just one current domain,
• authenticate user by e-mail address instead of SSO ID,
• accept opaque access tokens that are not jwt (for Google oAuth),
• store access token after first request fetched by code,
• allow to specify scope delimiter (some oAuth servers prefer space instead of comma),
• add test for DI configuration.

Possible BC break:

added method findOneBySsoEmail in src/Contracts/OAuth2AuthUserRepositoryInterface.php

credit for all @pulzarraider

• Allow anzusystems/common-bundle v3

• Create jwt with custom claims (@pulzarraider - https://github.com/anzusystems/auth-bundle/pull/11 )

• HttpUtil: Move creating RefreshTokenExistenceCookie to storeRefreshTokenOnResponse (@pulzarraider)

• Fix for not send bearer token ends up with 500 error

• Add user info endpoint fo oauth2 client

• Fix csrf token encoding and add ability to disable it

• Fix oauth2 state encoding
• Fix hash for stateless token as argon2id creates problems