🪸 v2.0.0 - Same lagoon, new reef

What's new

NC Connect V3 migration — the authentication platform moves from a custom OAuth2 server to Keycloak (OpenID Connect).

Features

• Keycloak endpoints — all OAuth2 URLs updated to /v3/realms/nc-connect/protocol/openid-connect/...
• Nonce validation — OIDC nonce generated and validated on id_token to prevent replay attacks
• Token refresh — V3 access tokens expire after 30 minutes; refreshToken() support built-in
• Configurable auth method — client_secret_basic (default) or client_secret_post
• Typed User accessors — getVerifiedLevel(), isEmailVerified(), getFirstName(), getFamilyName(), getBirthdate(), etc.
• Flexible logout — generateLogoutURL() accepts optional $idTokenHint and $postLogoutRedirectUri parameters (RP-Initiated Logout)
• New claim — first_name (first given name only, vs given_name which returns all given names)

Breaking changes

• Package renamed to gecka/socialite-ncconnect
• Requires PHP 8.2+
• birthcountry claim removed — use birthplace instead
• generateLogoutURL() no longer manages session state — store $user->tokenId and pass it as parameter

See UPGRADE.md for the full migration guide.

Other

• Added MIT license
• Added CI workflow (Pint lint + PHP 8.2–8.5 syntax check)
• Rewritten README with full documentation