v2.0

Mitigates security vulnerability CVE-2021-46743.

Notable changes:

• requires PHP 8.
• requires configuration changes
  • subtle change of wrapping the string secret into the new Secret configuration object when only using a single algorithm for encoding/decoding
  • when using multiple possible algorithms, "kid" JWT header parameter must be used when encoding the JWT

See the changelog for detailed info. Also see this issue to understand the changes.

v1.2

Means for mitigation of security issue CVE-2021-46743.

v1.1

Default injector improved.

v1

Stable. 🐎

v1.0 RC/1

Tested & fully functional release candidate.

v1.0 Alpha/1

Alpha release.