search

stevenmaguire / oauth2-keycloak

Keycloak Provider for OAuth 2.0 Client
MIT License
204 stars 151 forks source link

Warning: 4.0.0 is incompatible with firebase/php-jwt >= 6.6.0 #75

Open nymo opened 11 months ago

nymo commented 11 months ago

Unfortunately today I tripped into a problem with incompatible version. So it seems that in the firebase jwt library in version 6.6.0 and upwards a change in the decode method was introduced where values are passed by reference.

public static function decode(
        string $jwt,
        $keyOrKeyArray,
        stdClass &$headers = null
    ): stdClass {

This is in Version 4.0.0 of the keyycloak not working because the decode method is called with an array. It seems to be fixed in Version 5.0.0.

So when you use this library in 4.0.0 make sure that the php-jwt library is pinned at < 6.6.0.