thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server
https://oauth2.thephpleague.com
MIT License
6.49k stars 1.12k forks source link

Remove Key Leak 8.4.x #1359

Closed jeffhuys closed 11 months ago

jeffhuys commented 12 months ago

Could we consider a 8.4.x branch for security updates, so this can be maintained separately?

Running into issues with Snyk with oauth2-server-bundle, and am bound to PHP 7.x. I'm porting over a commit from this PR: https://github.com/thephpleague/oauth2-server/pull/1353

rhertogh commented 12 months ago

@Sephster Would it be possible to merge and release this?

MauricioKruijer commented 11 months ago

I need this for my symfony 5.4 project too, this would help me getting rid of snyk issues

Sephster commented 11 months ago

I will release this tonight 👍