TwoFactor/Trusted/JwtTokenEncoder::validationConstraints() may need an update

[tybw]

Bundle version: 6.x-dev
Symfony version: 6.2.0
PHP version: 8.1
Using authenticators (enable_authenticator_manager: true): NO

Description

The private method validationConstraints() in Scheb\TwoFactorBundle\Security\TwoFactor\Trusted uses Constraints\ValidAt() class under Lcobucci\JWT\Validation\Constraint. The latest 4.* version of lcobucci/jwt replaced ValidAt() with two similar classes: LooseValidAt and StrictValidAt. A reminder was found in the validationConstraints() method to change it when lcobucci/jwt is changed.

JwtTokenEncoder:

 private function validationConstraints(): iterable
    {
        yield new Constraint\SignedWith($this->configuration->signer(), $this->configuration->signingKey());
        yield new Constraint\ValidAt($this->clock); // replace with LooseValidAt once dependency on lcobucci/jwt is bumped up
        yield from $this->configuration->validationConstraints();
    }