v3.0

Breaking changes

• Laravel 11 is no longer supported. Every 11.x release is blocked by security advisories under Composer's default policy, so it could not be installed anyway.

What's Changed

• Support Laravel 13 and firebase/php-jwt 7, drop Laravel 11 by @underwear in #13

Supported versions are now laravel/framework 12–13 and firebase/php-jwt 6.8+ or 7, on PHP 8.2+ (8.3+ on Laravel 13).

Upgrade notes

• firebase/php-jwt 7 enforces a minimum signing key size. With HMAC algorithms, a key shorter than 32 bytes makes token issuing fail with DomainException: Provided key is too short. ^6.8 is still allowed, so applications locked on php-jwt 6 can adopt Laravel 13 without rotating signing keys first — check your LARAVEL_JWT_ENCODE_KEY before moving to php-jwt 7.

Full Changelog: v2.15...v3.0

v2.15

What's Changed

• [AIGOR-418] Support multiple decode keys for signing key rotation by @underwear in #12

Full Changelog: v2.14...v2.15

v2.14

Full Changelog: v2.13...v2.14

v2.13

What's Changed

• HasJwt Trait can configure token by @MrNubOK in #10

Full Changelog: v2.12...v2.13

v2.12: Merge pull request #9 from 12thbean/cross-site-auth

[ZEN-1053] added to config 'secure' & 'sameSite'

v2.11

Update composer.json

v2.10

Merge pull request #7 from 12thbean/ZD-5831_2

[ZD-5831] makeJwt got new param 'forceNew'

v2.9

now you can change name of cookie

v2.8

• password can be nullable
• added ci