v5.0.0

BREAKING CHANGES

• Upgrade to require Symfony 8.x and require PHP 8.5 and above.

v4.0.1

• Include roles in etag generation in \Gdbots\Bundle\IamBundle\Controller\Auth0Controller::meAction.

v4.0.0

BREAKING CHANGES

• Upgrade to require Symfony 7.2 or 8.x and require PHP 8.4 and above.

v3.1.2

• Use latest auth0-php library but also ensure correct algo is used when decoding.

v3.1.1

• Use latest auth0-php library.

v3.1.0

• Updates for symfony 6.4.x deprecations and typehint changes.

v3.0.0

BREAKING CHANGES

• Upgrade to support Symfony 6 and PHP 8.1.

v2.1.0

• Uses "gdbots/iam": "^2.1"
• Uses "gdbots/ncr-bundle": "^2.1"

v2.0.1

• Use TokenVerifier instead of IdTokenVerifier in Auth0JwtDecoder::decodeRS256 because we are validating an access token not an id token.

v2.0.0

BREAKING CHANGES

• Upgrade to support Symfony 5 and PHP 7.4.
• Uses "gdbots/iam": "^2.0"
• Uses "gdbots/ncr": "^2.0"
• Supports "auth0/auth0-php": "^7.0"
• Adds ncr permission checks in PbjxPermissionValidator. Commands and requests with node_ref(s) will translate into a permission in the format of vendor:label:action, e.g. acme:article:publish. This is in addition to the message permission check itself gdbots:ncr:command:publish-node. This is being done to eliminate the need to implement all the ncr commands/events/requests at the app level but still have precise permission controls.
• Adds AUTH0_CURRENT_SIGNING_SECRET and AUTH0_NEXT_SIGNING_SECRET which gives the Auth0JwtDecoder simple key rotation capability.