Jwt Auth Bundle Laravel Package

Full Changelog

Fixed

• Security fix: Resolve CVE-2026-50157

Full Changelog

Fixed

• Security fix: Resolve CVE-2026-34236

Full Changelog

Added

• feat: Add Symfony 8 support #230 (kishore7snehil), based on #221 by (NicolasDievart)

Fixed

• fix: correct .gitattributes #231 (kishore7snehil), based on #228 by (garak)

Full Changelog

Fixed

• Security fix: Resolve CVE-2025-68129

Full Changelog

Fixed

• Security fix: Resolve CVE-2025-58769

Full Changelog

Fixed

• fix: Remove unused ext-json requirement from composer.json #209 (kishore7snehil)

Full Changelog

Fixed

• Security fix: Resolve CVE-2025-47275

Full Changelog

Fixed

• fix : Unit Tests #200 (kishore7snehil)
• Removed Deprecated Rules From PHP CS Fixer #195 (kishore7snehil)

Full Changelog

This release includes experimental community-contributed support for Symfony 7. If you encounter any issues, please open an issue on GitHub.

Added

• Support for Symfony 7. #188 (mkilmanas)
• Support string concatenation of scopes. #183 (mkilmanas)

Changed

• Dashes in JWT permissions/scopes are now normalized. #184 (mkilmanas)

Fixed

• Fixed an issue in controller constructors using a $container argument. #190) (mkilmanas)

Full Changelog

Fixed

• Syntax typo in AuthenticationController::__construct() #180 (mkilmanas)
• Controller container property assignment #179 (mkilmanas)

Full Changelog

Fixed

• Disallow installation with Symfony 7.0 until fully compatible

Full Changelog

Fixed

• Restore method signatures #174 (evansims)

Added

• Implement support for Back-Channel Logout #167 (evansims) ¹

Changed

• Bumped auth0-php dependency version range to ^8.10.
• Raised the minimum supported PHP version to 8.1.
• Added support for Symfony ^6.4.
  • Symfony ^7.0 support will be added in a forthcoming release.

[!NOTE] ¹ To use this feature, an Auth0 tenant must have support for it enabled.

Added

• Organization Name support added for Authentication API and token handling ¹

Changed

• Bumped auth0-php dependency version range to ^8.7.
• Updated telemetry to indicate new symfony package name (previously jwt-auth-bundle.)

Note ¹ To use this feature, an Auth0 tenant must have support for it enabled. This feature is not yet available to all tenants.

Full Changelog

Warning This SDK is in beta and is subject to breaking changes. It is not recommended for production use, but your feedback and help in testing is appreciated!

This release introduces PHP 8.0 support, Symfony 6.1+ support, and upgrades the bundle to use Auth0's Auth0-PHP SDK 8.x branch. It also introduces a new configuration format, full authorization support, and other improvements. Please review the updated README.md for guidance on updating your application.

Full Changelog

This release introduces PHP 8.0 support and upgrades the bundle to use Auth0's PHP SDK 7.x branch. It also includes expanded JWT validation options, upgraded caching support, a simplified configuration format, and other improvements.

This release includes potential breaking changes that may require minor changes to host applications to support. Please review UPGRADING.md for guidance on updating your application.

Added

• Introduce PHP 8.0 support #108 (olix21)
• Update to latest Auth0 PHP SDK version #108 (evansims)
  • Configuration format updated. See README for example.
  • Cache support updated to support PSR-6 or PSR-16 caches. This cache is handed off to the Auth0 PHP SDK for use in JWK fetching.
  • Added opt-in JWT validation checks around nonce, azp, org_id, and aud claims, and support for max_age and leeway checks.
  • Enforces strict typing and expands type hinting.
  • Upgrades to PHPUnit 9, and updates unit tests to support syntax changes.
  • Adds unit tests for new helper classes.
  • Adds phpcs and phpstan checks.
• Adds support for Auth0 Organizations, currently in closed beta testing

Changed

• Use Symfony PSR-6 > PSR-16 cache adapter #110 (darthf1)

Full Changelog

Added

• Add support for autowiring #94 (dunglas)
• Give access to the raw JWT in the user provider #97 (dunglas)

Changed

• Remove unused argument, and unused property #95 (dunglas)

Full Changelog

Fixed

• Configuration authorized_issuer string or array compatibility #89 (antzo)

Full Changelog

Closed issues

• new release #86
• Remove SimplePreAuthenticatorInterface? #80

Added

• Symfony 5 support #87 (darthf1)
• Multiple authorized issuer #85 (antzo)

Fixed

• Fix deprecation Treebuilder::root #79 (darthf1)

Full Changelog

Added

• GuardAuthenticator implementation for Symfony 2.8 and later #75 (niels-nijens)

Full Changelog

Closed issues

• Support Symfony4 #55
• Allow multiple audiences in config #54

Added

• Add multiple audiences capability to JWT verification #57 (joshcanhelp)
• Allow symfony/framework-bundle 4.x #56 (ricbra)

Full Changelog

Added

• Added support for cache #51 (Nyholm)

Full Changelog

Closed issues:

• Symfony 3.0 Upgrade #24
• ... but is not mandatory #20

Merged pull requests:

• Symfony 3 #26 (glena)
• Symfony 3.0 Changes #25 (frodosghost)

Full Changelog

Merged pull requests:

• Fix YML sintax #23 (glena)
• YAML files that use double quotes need to escape backslashes #22 (frodosghost)

Full Changelog

Merged pull requests:

• updated auth0-php dependency #21 (glena)

Full Changelog

Closed issues:

• Setting secret_base64_encoded as false causes an exception #18
• Installation method is incorrect #15

Merged pull requests:

• [#18] Remove "cannotBeEmpty" property of secret_base64_encoded #19 (mickadoo)
• Replaces scope: 'openid profile' #17 (aguerere)

Full Changelog

Closed issues:

• Deps are wrong #16

Merged pull requests:

• Fixed readme #14 (tristanbes)
• Fixed all PSR-2 violations #13 (tristanbes)
• Fixed typo on Symfony word #12 (tristanbes)

Full Changelog

Merged pull requests:

• Updated JWT dependency #10 (glena)

Full Changelog

Merged pull requests:

• New info headers scheme #9 (glena)

Full Changelog

Merged pull requests:

• Added optional domain config + support for auth0-php 1.0.2 #8 (glena)

Full Changelog

Closed issues:

• SDK Client headers spec compliant #6

Merged pull requests:

• SDK Client headers spec compliant #6 #7 (glena)

Full Changelog

Implemented enhancements:

• Use auth0-php instead of custom implementation no Auth0Service #4
• Auth0 settings should be optional #3
• Remove auth0 dependency from the project #2

Closed issues:

• Update readme #1

Merged pull requests:

• Api v2 + SDK 1.0 support #5 (glena)

Full Changelog

Full Changelog

Full Changelog

* This Change Log was automatically generated by github_changelog_generator