Skip to content

Version 0.5.0

Latest
Latest

Choose a tag to compare

View all tags
@dunglas dunglas released this 11 Aug 11:28
Immutable release. Only release title and notes can be modified.
v0.5.0
84143af
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Add support for the Mercure protocol 1.0, alongside the existing 0.x protocol: new protocol_version (0.x, default, or 1.0) and cookie_name per-hub options
  • Add jwt.jwks_uri and jwt.key_id, fetching the signing key from a JSON Web Key Set endpoint via WebTokenFactory instead of jwt.secret (requires web-token/jwt-library, Mercure 1.0 hubs only)
  • Add jwt.claims (e.g. iss/sub/client_id), required by RFC 9068 when using jwt.secret/jwt.jwks_uri on a protocol_version: 1.0 hub; aud defaults to the hub's own URL when not set. Missing required claims fail at container compile time, and a 0.x hub without jwt.claims keeps minting byte-identical legacy tokens (no DefaultClaimsTokenFactory wrapping, no automatic aud)
  • Require symfony/mercure ^0.8
  • Require PHP 8.2, up from 8.1, following symfony/mercure
Assets 3
Loading