search

stevenmaguire / oauth2-keycloak

Keycloak Provider for OAuth 2.0 Client
MIT License
204 stars 151 forks source link

BC Break on v6 of firebase/php-jwt #65

Closed fsevestre closed 1 year ago

fsevestre commented 1 year ago

Hello, there are some BC Break on v6 of firebase/php-jwt : https://github.com/firebase/php-jwt/releases/tag/v6.0.0 Especially on the signature of the method JWT::decode

The versions from 4 to 6 are allowed for the moment for firebase/php-jwt on the master branch.

There are some discussions on the subject on a closed issue: https://github.com/stevenmaguire/oauth2-keycloak/issues/50#issuecomment-1449560604

mstefan21 commented 1 year ago

Release new version v5.0.0 for now allow only firebase v6 due to security.