v7.0.0

7.0.0 (2025-12-15)

⚠️ ⚠️ ⚠️ Security Fixes ⚠️ ⚠️ ⚠️

• add key size validation (#613) (6b80341)
  NOTE: This fix will cause keys with a size below the minimally allowed size to break.

Features

• add SensitiveParameter attribute to security-critical parameters (#603) (4dbfac0)
• store timestamp in ExpiredException (#604) (f174826)

Bug Fixes

• validate iat and nbf on payload (#568) (953b2c8)

v6.11.1

6.11.1 (2025-04-09)

Bug Fixes

• update error text for consistency (#528) (c11113a)

v6.11.0

6.11.0 (2025-01-23)

Features

• support octet typed JWK (#587) (7cb8a26)

Bug Fixes

• refactor constructor Key to use PHP 8.0 syntax (#577) (29fa2ce)

v6.10.2

6.10.2 (2024-11-24)

Bug Fixes

• Mitigate PHP8.4 deprecation warnings (#570) (76808fa)
• support php 8.4 (#583) (e3d68b0)

v6.10.1

6.10.1 (2024-05-18)

Bug Fixes

• ensure ratelimit expiry is set every time (#556) (09cb208)
• ratelimit cache expiration (#550) (dda7250)

v6.10.0

6.10.0 (2023-11-28)

Features

• allow typ header override (#546) (79cb30b)

v6.9.0

6.9.0 (2023-10-04)

Features

• add payload to jwt exception (#521) (175edf9)

v6.8.1

6.8.1 (2023-07-14)

Bug Fixes

• accept float claims but round down to ignore them (#492) (3936842)
• different BeforeValidException messages for nbf and iat (#526) (0a53cf2)

v6.8.0

6.8.0 (2023-06-14)

Features

• add support for P-384 curve (#515) (5de4323)

Bug Fixes

• handle invalid http responses (#508) (91c39c7)

v6.7.0

6.7.0 (2023-06-14)

Features

• add ed25519 support to JWK (public keys) (#452) (e53979a)