Repository navigation
Breaking Changes
- PHP 8.2+ required (previously 8.1+)
- Laravel 11+ required (previously 8+)
- lcobucci/jwt upgraded from v4 to v5 — if you reference lcobucci/jwt classes directly in your code, review their upgrade guide
The public API of this package is unchanged. All facade methods, ParsedToken methods, middleware, request macros, and exception classes work exactly as before.
Bug Fixes
- Token validation now uses the configured signer (
config('jwt.signer')) instead of always using HMAC SHA-256. Previously, tokens signed with RSA or other algorithms could not be validated throughParsedToken::validate().
Other Changes
- Added
lcobucci/clockas an explicit dependency (no longer pulled in transitively) - Added Laravel 13 support
- Replaced ChipperCI with GitHub Actions
- Upgraded to PHPUnit 11