tymondesigns / jwt-auth

🔐 JSON Web Token Authentication for Laravel & Lumen
https://jwt-auth.com
MIT License
11.23k stars 1.55k forks source link

SetSecret regenerates config with new secret in the Lcobucci provider #2262

Open f3cp opened 1 month ago

f3cp commented 1 month ago

Description

The secret that is set using the SetSecret method of the Lcobucci Provider is not used when encoding/decoding. This is due to the secret only being applied when the config is generated when the provider is first being constructed.

To fix the issue, the config needs to be regenerated after the new Secret has been set.

Fixes #2258 #2234 #2215