Auth Laravel Package

• [feat] Add quotaProject param for extensible client options support (#277)
• [feat] Add signingKeyId param for jwt signing (#270)
• [docs] Misc documentation improvements (#268, #278, #273)
• [chore] Switch from Travis to Github Actions (#273)

• [feat] Add option to throw exception in AccessToken::verify(). (#265)
• [feat] Add support for x-goog-user-project. (#254)
• [feat] Add option to specify issuer in AccessToken::verify(). (#267)
• [feat] Add getProjectId to credentials types where project IDs can be determined. (#230)

• [fix] Invalid character in iap cert cache key (#263)
• [fix] Typo in exception for package name (#262)

• [feat] Add ID token to auth token methods. (#248)
• [feat] Add support for ES256 in AccessToken::verify. (#255)
• [fix] Let namespace match the file structure. (#258)
• [fix] Construct RuntimeException. (#257)
• [tests] Update tests for PHP 7.4 compatibility. (#253)
• [chore] Add a couple more things to .gitattributes. (#252)

• [fix] Handle DST correctly for cache item expirations. (#246)

• [feat] Add utility for verifying and revoking access tokens. (#243)
• [docs] Fix README console terminology. (#242)
• [feat] Support custom scopes with GCECredentials. (#239)
• [fix] Fix phpseclib existence check. (#237)

Features

• Add support for Guzzle 8 (#677) (6f4c5f6)
• Add workload identity federation support for AWS ECS tasks (#496) (#674) (ed26eec)

Features

• Regional Access Boundaries (#649) (fe228ee)

• [fix] Move loadItems call out of SysVCacheItemPool constructor. (#229)
• [fix] Add Metadata-Flavor header to initial GCE metadata call. (#232)

Features

• Add ExternalAccountAuthorizedUser credentials (#662) (47b05b0)

• [fix] Moved getClientName() from Google\Auth\FetchAuthTokenInterface to Google\Auth\SignBlobInterface, and removed getClientName() from InsecureCredentials and UserRefreshCredentials. (#223)

Bug Fixes

• ImpersonatedCredentials getLastReceivedToken returns correct token (#655) (a4fe69c)
• Support psr/log 2 (#654) (4b746b8)

Features

• Support firebase/php-jwt 7 (#645) (ae52b0a)

Changes

• Add support for signing strings with a Credentials instance. (#221)
• [Docs] Describe the arrays returned by fetchAuthToken. (#216)
• [Testing] Fix failing tests (#217)
• Update GitHub issue templates (#214, #213)

Features

• Add semaphore locking to Sysv cache (#640) (38ea069)
• Json key scopes in ImpersonatedServiceAccountCredentials (#638) (b6b6966)

Bug Fixes

• Filecache race condition (#637) (09042be)

Bug Fixes

• Remove deprecated Item class for the CacheItemPool (#631) (7ec42c6)

Features

• Add the rpcName to the logged event (#630) (d1d9e21)

Bug Fixes

• Deprecate Credentials::makeCredentials (#624) (12bb6e8)

Bug Fixes

• Undefined index error in cache trait (#617) (ff7ece6)

Features

• Add support for $_ENV in CredentialsLoader (#612) (3e63576)

Features

• Add support for Impersonating ID Tokens (#580) (66db27c)

Bug Fixes

• Return impersonated token as lastReceivedToken (#606) (33c3c85)

Documentation

• fix broken reference (#602)

Bug Fixes

• Minor changes to allow for refdoc regeneration (#600) (608115c)

Features

• Add StdOutLogger and LoggingTrait (#578) (4f793fe)

Features

• Add service account impersonation for access tokens (#586) (ba137b2)

Bug Fixes

• Add support for php 8.4, remove implicit nullable (#591) (3e1061b)

Features

• Add ID tokens for user refresh credentials (#468) (1601efc)
• Call IamCredentials endpoint for generating ID tokens outside GDU (#581) (2d7d03d)

Bug Fixes

• Compatability with php 8.4 (#584) (da1f02a)
• Update universe domain URI (#572) (6b00b66)

Features

• Add a file system cache class (#571) (8555cb0)
• Private key getters on service account credentials (https://github.com/googleapis/google-auth-library-php/pull/557) (d2fa07b)

Features

• Change getCacheKey implementation for more unique keys (#560) (a35c4db)

Features

• Add windows residency check (#553) (ec13a53)

Changes

• Add support for insecure credentials (#208)

Features

• Enable auth observability metrics (#509) (6495f31)

Features

• Add ExecutableSource credentials (#525) (d98900d)

Bug Fixes

• Use gmdate to format x-amz-date with UTC irrespective of timezone (#540) (3031d2c)

Features

• Add caching for universe domain (#533) (69249ab)

Features

• Universe domain for Iam (#531) (b905a56)

Features

• Add expires_in and token_type to tokens from ServiceAccountJwtAccessCredentials (#513) (ee2436d)
• Workforce credentials (#485) (c1b240f)

Bug Fixes

• Disallow vulnerable guzzle versions (#520) (cb782dd)

Features

• Respect sub for domain-wide delegation in service account creds (#505) (821d4f3)
• Support universe domain in service account and metadata credentials (#482) (e4aa874)

Bug Fixes

• ID Token Caching for GCECredentials (#510) (3222f9e)

Features

• Add and implement universe domain interface (#477) (35781ed)

Miscellaneous

• Refactor AuthTokenMiddleware (#492)

Changes

• Add retry and increase timeout for GCE credentials (#195)
• [Docs] Fix spelling (#204)
• Update token url (#206)

Bug Fixes

• Allowed_algs not properly set for string value (#489) (0042b52)

Features

• Respect cache control for access token certs (#479) (6d426b5)

Changes

• Only emits a warning for gcloud credentials (#202)

Features

• Add AWS credential source (#474) (e5bc897)

Changes

• Added a warning for 3 legged OAuth credentials (#199)
• [Code cleanup] Removed useless else after return (#193)

Features

• Add support for BYOID / STS (#473) (2938e58)

Changes

• Fixes usage of deprecated env var for GAE Flex (#189)
• fix - guzzlehttp/psr7 dependency version definition (#190)
• Added SystemV shared memory based CacheItemPool (#191)

Bug Fixes

• Use PKCS8 by default for ID token verify (#466) (0c3a1be)

Features

• Check unix residency for gce when ping fails (#469) (3c672f9)

Features

• Add pkce support (#454) (1326c81)
• Implement quota project from env var in google/auth (#452) (a9e8ae3)

Features

• deps: Add support for psr/http-message 2.0 (#449) (bc71f90)

Features

• Access granted scopes (#441) (3e5c9f1)
• Add support for phpseclib3 (#425) (623acee)

Features

• Add getFetcher to FetchAuthTokenCache (#431) (cf7ac54)

Features

• Add ImpersonatedServiceAccountCredentials (#421) (de766e9)

Bug Fixes

• Do not call GCECredentials::onGCE if ADC has already checked (#422) (085cc64)

Features

• Double default truncateAt for guzzle error output (#415) (e2f6a89)

• [feat]: add support for Firebase v6.0 (#391)

Changes

• Fixes array merging bug in Guzzle5HttpHandler (#186)
• Fixes constructor argument bug in Subscriber & Middleware (#184)

• [feat]: add support for psr/cache:3 (#364)
• Dropped Support for PHP 5.6 and 7.0

Changes

• Adds async method to HTTP handlers (#176)
• Misc bug fixes and improvements (#177, #175, #178)

• Dropped support for:
  • PHP 5.4 and 5.5
  • Guzzle 5
  • Firebase JWT 2.0, 3.0, and 4.0

• [feat]: Add support for guzzlehttp/psr7 v2 (#357)

• [fix]: consistently use useSelfSignedJwt method in ServiceAccountJwtAccessCredentials (#351)
• [feat]: add loading and executing of default client cert source (#353)
• [feat]: add support for proxy-authorization header (#347)

• [feat]: allow ServiceAccountJwtAccessCredentials to sign scopes (#341)
• [feat]: allow psr/cache:2.0 (#344)

• [fix]: ensure cached tokens are used for GCECredentials::signBlob (#340)
• [fix]: adds check for getClientName (#336)

• [fix]: update minimum phpseclib for vulnerability fix (#331)

• [feat]: support for PHP 8.0: updated dependencies and tests (#318, #319)

• [fix]: add expires_at to GCECredentials (#314)

• [fix]: Better FetchAuthTokenCache and getLastReceivedToken (#311)

• [fix]: variable typo (#310)

• [feat]: Add support for default scopes (#306)

• [feat]: Add service account identity support to GCECredentials (#304)

• [feat]: Add QuotaProject option to getMiddleware (#296)
• [feat]: Add caching for calls to GCECredentials::onGce (#301)
• [feat]: Add updateMetadata function to token cache (#298)
• [fix]: Use quota_project_id instead of quota_project (#299)

• [fix]: catch ConnectException in GCE check (#294)
• [docs]: Adds reference docs

• [feat]: Check cache expiration (#291)
• [fix]: OAuth2 cache key when audience is set (#291)

• [feat]: Add support for Guzzle 7 (#256)
• [fix]: Remove SDK warning (#283)
• [chore]: Switch to github pages deploy action (#284)

Changes

• Supports additional claims in JWT tokens (#171)
• Adds makeHttpClient for creating authorized Guzzle clients (#162)
• Misc bug fixes/improvements (#168, #161, #167, #170, #143)

Changes

• Adds support for Firebase 5.0 (#159)

Changes

• Adds hashing and shortening to enforce max key length ([@bshaffer])
• Fix for better PSR-6 compliance - verifies a hit before getting the cache item ([@bshaffer])
• README fixes ([@bshaffer])
• Change authorization header key to lowercase ([@stanley-cheung])

Changes

• Export callback function to update auth metadata ([@stanley-cheung][])
• Adds an implementation of User Refresh Token auth ([@stanley-cheung][])

[@bshaffer]: https://github.com/bshaffer [@stanley-cheung]: https://github.com/stanley-cheung