Broken phpseclib/phpseclib dependency

[jaimeperez]

Hi!

The dependency on phpseclib/phpseclib is broken. They have just released 1.0.0 (which is fine), but also 2.0.0, which introduces namespaces and therefore breaks the jose library as it doesn't use namespaces for this dependency.

We've tested with 1.0.0 and it apparently works fine, so I would suggest changing the dependency to (but you may want to check that actually everything is working for you):

    "phpseclib/phpseclib": ">=0.3.5 <2.0.0"

I'd say it's quite urgent, since at the moment the library is completely broken for new installations.

Thanks!

[nov]

OK, I'll release with your quick fix for now.
And also it's probably good timing to remove php5.2 support and start using phpseclib 2.0+.

[nov]

this pull request limits phpseclib version between 0.3.5 and 0.3.10.
#26

ps.
1.0.0 also has an issue which changes JOSE_JWS behaviour.
phpseclib/phpseclib#768

[jaimeperez]

Good that you were able to spot the problem with 1.0.0. Thanks for solving this, Nov!