XeroAPI / xero-php-oauth2

Xero PHP SDK for oAuth 2 generated from Xero API OpenAPI Spec 3.0
MIT License
87 stars 64 forks source link

fix: remove 5.x support and update decode method signature #327

Open jasonlewis opened 1 year ago

jasonlewis commented 1 year ago

See advisory: Firebase PHP-JWT key/algorithm type confusion

There's also an issue where the two versions of jwt-php have different method signatures for the JWT::decode method. In version 6 supported algorithms are no longer given as a third parameter.

JWK::parseKeySet already returns a properly formatted array of keys.

https://github.com/firebase/php-jwt/tree/main#using-jwks

philiphoek commented 10 months ago

I have also run into this problem, so it would be nice if this can be released as soon as possible.