Version 4.10.2

Miscellaneous bug fixes
Change default lti_message_hint to none
Add support for X_ORIGINAL_HOST header
Allow tools to disable use of platform storage
Add check for invalid context and resource link ID values
Improve method for parsing roles

Version 5.0.0 release candidate 1

Library code updated for PHP 8.1+ - see Upgrading page for details of changes from version 4. Feedback is invited on this draft release.

Version 4.10.1

Allow capabilities postMessages to be served from the parent window rather than the one passed to the tool (as a workaround for the current implementation in Anthology Learn).

Version 4.10.0

Add workaround for Anthology Learn bug in Names and Role Provisioning services
Add support for draft "OIDC Login with LTI Client Side postMessages" specification
Add support for Firebase PHP-JWT 6.0.0
Fix bug with saving learners when no lis_result_sourcedid is provided
Retain Moodle groupings with no groups
Add middle name to Assessment Platform verified claims
Add support for submission review message
Make life of launch state values a platform property
Fix support for LTI 1.3 TeachingAssistant role URI
Add new core role methods to Tool object: isInstructor, isContentDeveloper, isTeachingAssistant, isManager, isMember, isOfficer, isMentor

Version 4.9.0

Ensure Memberships service saves all learners
Registration access token is optional
Added support for using Memcache to handle nonce values

Version 4.8.0

Added check for blocked third-party cookies
Added option to generate warnings about any additional errors identified
Added support for user's middle name
Other code improvements

Version 4.7.3

Ignore namespace in XML service responses
Fix bug with supported messages in platform configurations
Add support for username passed by Brightspace
Allow Context to be passed to UserResult->getId method
Add HTTP version override option to CurlClient
Improve logging for PDO database connections

Version 4.7.2

Fix mapping of LTI 1.3 claim for Basic Outcomes service
Add check for Course Groups service in getMemberships method
Added checks for required properties of optional message claims
Fix bug with updating date of last access for a platform
Fix handling of groups belonging to more than one group in Moodle API hook
Deprecated CanvasApiToolProvider class (use CanvasApiTool instead)
Fix signing of extension service requests with LTI 1.3

Version 4.7.1

Fix bug with format of JWT claim using FirebaseClient

Version 4.7.0

Fix bug with checking state value on LTI 1.3 messages
Add support for groups to belong to more than one groupset (so set element of a group may now be an array of strings rather than just a string)
Correct value of iss claim in client_assertion JWT when requesting an access token
Add option to allow use of HTTP GET for LTI 1.3 authentication requests
Improve mapping between JWT claims and OAuth1 message parameters (uses "lti1p1_" prefix for any "https://purl.imsglobal.org/spec/lti/claim/lti1p1" claims; added "target_link_uri" and "unmapped_claims" parameters)