Weave Code
Oauth Subscriber Laravel Package
guzzlehttp/oauth-subscriber
Guzzle middleware for OAuth 1.0 request signing (consumer key/secret + token/secret) compatible with Guzzle 7.11+ and PHP 7.2.5+. Add to a HandlerStack, set auth=oauth, and optionally override token credentials per request.
1.0.0
- Dropped support for PHP 7.2 and 7.3
- Require
guzzlehttp/guzzle^8.0,guzzlehttp/promises^3.0, andguzzlehttp/psr7^3.0 - Escape unsafe configuration values in generated OAuth exceptions
- Reject native PHP serialization of
Oauth1 - Reject non-finite float values in OAuth parameters
- Added native return types to the OAuth middleware entry point
- Improved PHPDoc for OAuth config arrays and middleware handler contracts
- Trim
Content-Typemedia types with HTTP optional whitespace when signing - Hide sensitive OAuth arguments in stack traces on PHP 8.2+
0.9.5
- Require
guzzlehttp/guzzle^7.15 andguzzlehttp/psr7^2.13 - Use locale-independent ASCII case folding for signature base string inputs
0.9.4
- Require
guzzlehttp/guzzle^7.13.3 andguzzlehttp/psr7^2.12.4 - Pass explicit trim characters ahead of the PHP 8.6 trim default change
0.9.3
- Require
guzzlehttp/guzzle^7.12.3 andguzzlehttp/psr7^2.12.3 - Fixed form body signing for parameterized and case-insensitive content types
0.9.2
- Fixed non-finite float values emitting coercion warnings on PHP 8.5
0.9.1
- Require
guzzlehttp/guzzle^7.11,guzzlehttp/psr7^2.11
0.9.0
- Added support for PHP 8.5
- Added support for per-request
tokenandtoken_secretoverrides - Convert RSA signing failures to runtime exceptions
- Fixed OAuth parameter normalization for duplicate parameter values
- Sign bare query and form parameters as empty values
0.8.2
- Fixed signature generation when request body or query parameters include
oauth_signature - Validate RSA private key configuration before signing
0.8.1
- Fixed insufficient nonce entropy (CVE-2025-21617)
0.8.0
- Adjusted some method modifiers and added return types
- Fixed signature generation with duplicate query parameters
0.7.0
- Dropped support for HHVM and PHP <7.2.5
- Dropped support for Guzzle 6.x and PSR-7 1.x
- Added support for PHP 8.1, 8.2, 8.3, 8.4
- Add param types to various methods
0.6.0
- Added support for
guzzlehttp/psr7:^2.0
0.5.0
- Add oauth_body_hash parameter to authorization header
- Do not require token_secret for 2-legged authentication
- Added HMAC-SHA256 support
- Added ext-openssl suggest
- Added PHP 8 Support
0.4.0
- Allow guzzle 7
0.3.0
- Updated to work with Guzzle 6 as a middleware
Weaver
How can I help you explore Laravel packages today?