Weave Code
Code Weaver
Helps Laravel developers discover, compare, and choose open-source packages. See popularity, security, maintainers, and scores at a glance to make better decisions.
Feedback
Share your thoughts, report bugs, or suggest improvements.
Subject
Message

Simplejwt Laravel Package

kelvinmo/simplejwt

SimpleJWT is a PHP 8+ library for creating, signing, verifying, and encrypting JSON Web Tokens (JWT/JWS/JWE). Supports JWK/COSE keys, HMAC/RSA/ECDSA/EdDSA, key management (RSA-OAEP, ECDH-ES, PBES2), and AES-GCM/CBC-HS encryption.

View on GitHub
Deep Wiki
Context7
v1.1.2
  • Fixed: PHP 8.5 compatibility (#241)
  • Added: Check for presence of alg header in JWT (#240)
v1.1.1
  • Fixed: Added validation to p2c parameter in PBES2
v1.1.0
  • Added: Error codes in BinaryEncodingException, CryptException and KeyException to provide more useful error diagnosis
  • Changed: Changed algorithm that automatically generate key IDs (kid) to use full RFC7517 thumbnail
v1.0.3
  • Fixed: PHP 8.4 deprecates implicitly nullable parameters in function signatures
v1.0.2
  • Fixed: Incorrect RSAKey::getSize() if leading zero byte is not present in two's complement encoding (#225)
v1.0.1
  • Fixed: Uncaught SodiumException if an error occurs in functions that use libsodium (#218)
v1.0.0
  • Removed: Support for PHP 7.3 and 7.4
  • Removed: jwkstool command-line tool and associated dependencies (most notably symfony/console). jwkstool is now available as a separate package kelvinmo/jwkstool
v0.9.3
  • Fixed: Issue with gmp_pow for certain versions of PHP (#214)
v0.9.2
  • Fixed: RSAKey cannot parse PKCS#8 encoded RSA private keys (#206)
v0.9.1
  • Fixed: Deprecation warning in constructor of AESGCMKeyWrap (#197)
v0.9.0
  • Changed: Providing invalid JSON tokens into JWT::deserialise() and JWE::decrypt() will throw an InvalidTokenException instead of InvalidArgumentException
  • Changed: JWT and JWE methods now check for validity of algorithm classes
  • Changed: Additional type hinting on public API methods
  • Removed: Support for PHP 7.2
v0.8.2
  • Changed: Update dependency on symfony/console to support v7.0
v0.8.1
  • Fixed: Throw a KeyException when loading an invalid PEM-encoded RSAKey
v0.8.0
  • Added: Support for Ed25519 signatures and X25519 key derviation algorithms
  • Added: Support for AES GCM key encryption algorithms (A128GCMKW, A192GCMKW and A256GCMKW)
  • Added: Support for COSE based keys
  • Changed: Use box to package the jwkstool utility
  • Changed: Refactored Algorithm (now renamed to BaseAlgorithm) and Key to extract interfaces (into AlgorithmInterface and KeyInterface respectively)
  • Changed: Key ID kid parameter no longer automatically generated when a Key object is created. Use Key::getKeyId(true) or KeySet::add(..., true) to generate a key ID
  • Removed: Helper::getObject() and Helper::getJWTObject() have been replaced by Helper::decode() and Helper::decodeFully() respectively
  • Removed: Support for PHP 7.1
v0.7.1
  • Fixed: Incorrect key selection when encrypting/decrypting keys in ECDH-ES+AxxxKW (#159)
  • Fixed: Exporting keys as JSON in jwkstool
v0.7.0
  • Changed: Split SimpleJWT\Crypt namespace into multiple namespaces, one for each algorithm type (#60)
  • Changed: JWT and JWE now derives from a common parent class Token
  • Changed: Improved ASN.1 processing code (#68)
  • Changed: Util::base64url_decode() will now throw \UnexpectedValueException instead of returning false if the input cannot be decoded
v0.6.3
  • Deprecated: Helper::getObject() and Helper::getJWTObject() have been replaced by Helper::decode() and Helper::decodeFully() respectively, and will be removed in future versions
v0.6.2
  • Changed: Updated symfony/console package version
  • Fixed: Compatibility with PHP 8.1 when using ECDH (#58)
v0.6.1
v0.6.0
  • Added: Support for Elliptic Curve Diffie-Hellman Ephemeral Static algorithms
  • Added: JWT::tokenHash() to calculate OpenID Connect access token hash values
  • Changed: When parsing multi-recipient JWTs and JWEs without corresponding key, the error code for InvalidTokenException was changed from TOKEN_PARSE_ERROR to SIGNATURE_VERIFICATION_ERROR (for JWSs) and DECRYPTION_ERROR (for JWEs), so that they are consistent with their single-recipient equivalents
  • Fixed: Decoding JSON formatted JWEs and JWKs
  • Fixed: Parsing multi-recipient JWTs and JWEs
v0.6.0-rc.2
v0.6.0-rc.1
v0.5.3
Weaver

How can I help you explore Laravel packages today?

Conversation history is not saved when not logged in.
Prompt
Add packages to context
No packages found.
nexmo/api-specification
capell-app/block-library
axium/identity
cetria/laravel-dummy-models
cetria/reflection-helper
agropredict/sso-auth-bundle
evolvestudio/spam-protection
datacore/hub-sdk
develia/commons
cuci/prototurk-sdk
cuci/prototurk-sdk-symfony
develia/geo-bundle
dreamzy/livewire-charts
touchestate-sdk/php-sdk
ecotone/kafka
22h/doctrine-garbage-collection-bundle
agtp/agtp-php
agtp/mod-php
splash/sonata-admin
splash/metadata