Skip to content

Choose a tag to compare

@jszobody jszobody released this 10 Mar 21:17

Breaking Changes

  • PHP 8.2+ required (previously 8.1+)
  • Laravel 11+ required (previously 8+)
  • lcobucci/jwt upgraded from v4 to v5 — if you reference lcobucci/jwt classes directly in your code, review their upgrade guide

The public API of this package is unchanged. All facade methods, ParsedToken methods, middleware, request macros, and exception classes work exactly as before.

Bug Fixes

  • Token validation now uses the configured signer (config('jwt.signer')) instead of always using HMAC SHA-256. Previously, tokens signed with RSA or other algorithms could not be validated through ParsedToken::validate().

Other Changes

  • Added lcobucci/clock as an explicit dependency (no longer pulled in transitively)
  • Added Laravel 13 support
  • Replaced ChipperCI with GitHub Actions
  • Upgraded to PHPUnit 11