summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* updates README changelog for v5.0.0 (#166)HEADv5.0.0origin/masterorigin/HEADmasterBrent Shaffer2017-06-271-0/+21
|
* Remove outdated package.xml (#165)Brent Shaffer2017-06-261-77/+0
|
* added `array` type hinting to `decode` method (#101)Michał2017-06-261-4/+1
|
* Add new line warning to README (#115)Chinedu Francis Nwafili2017-06-211-0/+6
|
* Detect invalid Base64 encoding in signature (#162)Brent Shaffer2017-06-212-2/+10
|
* Add the proper Exception message for all JSON error types by PHP (#110)Giorgio Balduzzi2017-06-211-1/+3
|
* removes minimum-stabity from composer.json (#161)Brent Shaffer2017-06-211-1/+0
|
* Updates JWT::verify to handle openssl errors (#159)Brent Shaffer2017-06-212-7/+36
|
* Fixes travis, adds PHP 7.1, and removes HHVM (#160)Brent Shaffer2017-06-214-26/+8
|
* Merge pull request #129 from stampycode/patch-1Brent Shaffer2017-06-211-0/+3
|\ | | | | bugfix: 'kid' not in given key list
| * cosmetic updatesTim Stamp2017-01-241-2/+2
| |
| * bugfix: 'kid' not in given key listTim Stamp2016-12-121-0/+3
| | | | | | | | if 'kid' value is not found in the given key map, should throw an exception. Instead, it was outputting a php warning for using an undefined index, resulting in a null key.
* | example for RS256 openssl (#125)Henry N2017-06-191-0/+54
| |
* | draft-ietf-oauth-json-web-token-06 --> rfc7519 (#107)Arjan Keeman2017-06-191-1/+1
| | | | | | The README says this package is conform rfc7519 (May 2015) rather than just the 6th draft (valid until June 2013). The implementation seems indeed to be compatible with the rfc.
* | Support RS384 and RS512 (#117)Joost Faassen2017-06-191-0/+2
|/
* Travis: run tests also under PHP 5.6 and PHP 7.0 (#108)Petr Kotek2016-08-311-0/+2
|
* Update README for v4.0.0v4.0.0Rob DiMarco2016-07-171-0/+6
|
* Add in support for late static binding, so that developers can extend and ↵Tom Chapman2016-06-281-21/+21
| | | | override variables / methods if they so require (#88)
* Fix exceptions classes (#81)Maks3w2016-06-162-9/+11
| | | | | | | | | | | | | | | | | | * Use InvalidArgumentException when $allowed_algs is not array > Exception thrown if an argument is not of the expected type. http://php.net/manual/en/class.invalidargumentexception.php * Use RuntimeExceptions for exceptions related with unencoded data. RuntimeExceptions is the correct exception error source is the decoded data. Note LogicExceptions as defined in PHP documentation implies a modification in the code by the developer. > Exception that represents error in the program logic. This kind of exception should lead directly to a fix in your code. http://php.net/manual/en/class.logicexception.php But the token is a data provided by an external source which is out side of the control of the developer so there is no way of prevent malformed tokens.
* Merge pull request #82 from voku/masterRob DiMarco2016-06-162-0/+9
|\ | | | | ".gitattributes" <- prevent installing special files via composer
| * [+]: ".gitattributes" <- prevent installing special files via composerLars Moelleken2016-02-012-0/+9
| | | | | | | | [*]: add missing phpdoc
* | Merge pull request #93 from josephmcdermott/specify-current-timestampRob DiMarco2016-06-161-3/+13
|\ \ | | | | | | Use static $timestamp instead of time()
| * | Commit with Google email address for CLAJoseph McDermott2016-05-031-0/+1
| | |
| * | Allow timestamp to be specified rather than relying on PHP time() functionJoseph McDermott2016-04-291-3/+12
| |/
* | Merge pull request #96 from legoktm/patch-1Rob DiMarco2016-06-161-1/+0
|\ \ | | | | | | Remove newline at beginning of run-tests.sh
| * | Remove newline at beginning of run-tests.shKunal Mehta2016-06-091-1/+0
| |/ | | | | | | The extra newline trips a warning in lintian when packaging for Debian, so just remove it.
* | Merge pull request #76 from akeeman/patch-1Rob DiMarco2016-06-161-5/+5
|\ \ | |/ |/| Remove null as possible key value in docblock
| * Remove null as possible key value in docblockArjan Keeman2015-12-301-5/+5
|/ | | The docblock states that null is a possible value for $key, however, it clearly results in an exception.
* Addresses issue #72 - update link to current specRob DiMarco2015-11-181-2/+1
|
* Merge pull request #66 from firebase/jw-travis-upgradeRob DiMarco2015-09-081-0/+2
|\ | | | | Update Travis to use their new container infrastructure
| * Update Travis to use their new container infrastructureJacob Wenger2015-09-081-0/+2
|/ | | See [here](http://docs.travis-ci.com/user/migrating-from-legacy/) for details.
* Update package.xml and README.md for 3.0.0 releasev3.0.0Rob DiMarco2015-07-222-3/+15
|
* Merge pull request #60 from sjones608/nullkeyRob DiMarco2015-07-222-40/+63
|\ | | | | require a non-empty key to decode a JWT
| * add use InvalidArgumentException to account for JWT namespaceSteve Jones2015-07-211-0/+1
| |
| * Merge remote-tracking branch 'upstream/master' into nullkeySteve Jones2015-07-2110-49/+78
| |\ | |/ |/|
* | Merge pull request #62 from johanderuijter/docblockRob DiMarco2015-07-161-22/+33
|\ \ | | | | | | Aligned the DocBlocks
| * | Aligned the DocBlocksJohan de Ruijter2015-07-151-22/+33
|/ / | | | | | | Clarified and corrected the documentation where needed.
* | Merge pull request #59 from Dashron/masterRob DiMarco2015-07-0910-27/+45
|\ \ | | | | | | Add firebase\jwt namespace
| * | fix unexpectedvalueexceptions and add unit testsAaron Hedges2015-07-012-0/+7
| | |
| * | update example to use new namespaceAaron Hedges2015-07-011-0/+1
| | |
| * | Add firespace\jwt namespaceAaron Hedges2015-07-019-27/+37
| | |
| | * require a non-empty key to decode a JWTSteve Jones2015-07-082-40/+62
| |/ |/|
* | Add composer.phar to gitignoreRob DiMarco2015-07-052-0/+1
|/
* Update README and bump to v2.2.0v2.2.0Rob DiMarco2015-06-224-3/+27
|
* Merge pull request #53 from mcocaro/masterRob DiMarco2015-06-222-1/+11
|\ | | | | Adding optional headers to send in JWT
| * Reversing array merge to avoid overwrites of default headersMartin Cocaro2015-06-181-1/+1
| |
| * Adding testMartin Cocaro2015-06-171-0/+6
| |
| * Assigning to header var merged arrayMartin Cocaro2015-06-171-1/+1
| |
| * Merging both arrays togetherMartin Cocaro2015-06-171-1/+1
| |
| * Adding array_values onlyMartin Cocaro2015-06-171-1/+1
| |
| * Adding header options to addMartin Cocaro2015-06-171-1/+5
|/
* Add badges for latest release, total downloads, and licenseRob DiMarco2015-05-201-0/+3
|
* Update package.xmlv2.1.0Rob DiMarco2015-05-201-6/+6
|
* Update README for v2.1.0 releaseRob DiMarco2015-05-201-0/+6
|
* Merge pull request #47 from firebase/rd-improve-test-isolationChris Raynor2015-05-202-4/+10
|\ | | | | Reset clock skew / leeway after relevant tests & update README
| * Reset clock skew / leeway after relevant tests & update READMERob DiMarco2015-05-182-4/+10
| |
* | Merge pull request #48 from aztech-forks/masterRob DiMarco2015-05-192-1/+9
|\ \ | |/ |/| Allow using \ArrayAccess as $key in \JWT::decode
| * Add tests for \ArrayAccess key chooserAztech2015-05-191-0/+8
| |
| * Allow using \ArrayAccess as $key in decodeThibaud Fabre2015-05-191-1/+1
|/
* Merge pull request #46 from lcabral37/skewRob DiMarco2015-05-183-4/+89
|\ | | | | Provide a leeway in verification of times to account for clock skew
| * Added tests with leeway value in nbf and iatLuis Miguel Cabral2015-05-151-0/+44
| |
| * Reverted some tests from first commitLuis Miguel Cabral2015-05-111-9/+3
| |
| * Changed the leeway to be a static variableLuis Miguel Cabral2015-05-113-9/+44
| |
| * Provide a leeway time in the verification of timestamps to account for clock ↵Luis Miguel Cabral2015-04-092-6/+18
| | | | | | | | skew
* | Merge pull request #37 from stof/patch-1Rob DiMarco2015-04-131-1/+0
|\ \ | |/ |/| Remove the useless target-dir setting from the composer config
| * Remove the useless target-dir setting from the composer configChristophe Coevoet2015-04-021-1/+0
|/ | | | target-dir was meant to allow using the root of the package as a PSR-4 root and make composer prepend the target dir when installing to make it compatible with PSR-0, before PSR-4 was a reality. This setting is deprecated in Composer in favor of using PSR-4, and it is not needed anyway when using the classmap autoloading.
* Merge branch 'master' of github.com:firebase/php-jwtRob DiMarco2015-04-011-1/+0
|\
| * Update composer.jsonChris Raynor2015-04-011-1/+0
| |
* | Add ChangelogRob DiMarco2015-04-011-0/+11
|/
* Bump version to 2.0.0v2.0.0Rob DiMarco2015-04-012-4/+5
|
* Merge pull request #36 from firebase/cr-additional-testsRob DiMarco2015-04-011-0/+31
|\ | | | | Add a few add'l tests - more forthcoming
| * Add a few add'l testsRob DiMarco2015-04-011-1/+18
| |
| * Merge branch 'rd-verify-refactor' into cr-additional-testsRob DiMarco2015-04-011-1/+1
| |\
| * | A few additional tests for none algorithm and an incorrect algorithmdrtriumph2015-04-011-0/+14
| | |
* | | Update README to reflect newly-required algorithms argumentsRob DiMarco2015-04-011-8/+7
| | |
* | | Merge pull request #35 from firebase/rd-verify-refactorChris Raynor2015-04-013-61/+42
|\ \ \ | | |/ | |/| Refactor decode() code path to address security vulnerabilities
| * | Comment tweaksRob DiMarco2015-04-011-1/+1
| |/
| * Update decode() to require allowed algorithms arg when verifyingRob DiMarco2015-04-012-18/+19
| |
| * Updates to JWT decode() / verify() pathRob DiMarco2015-04-013-50/+30
|/
* Add'l updates to the ./run-tests.sh scriptRob DiMarco2015-04-011-7/+1
|
* Update to ./run-tests.shRob DiMarco2015-04-012-12/+3
|
* Merge pull request #34 from sarciszewski/patch-2Rob DiMarco2015-04-011-0/+54
|\ | | | | Add GnuPG verified phpunit script
| * Add GnuPG verified phpunit scriptScott Arciszewski2015-04-011-0/+54
| |
* | Merge pull request #33 from sarciszewski/patch-1Rob DiMarco2015-04-013-2/+53
|\ \ | |/ |/| Allow users to lock their app into an algorithm.
| * Use native functions when they exist.Scott Arciszewski2015-04-011-0/+3
| |
| * Harden against mbstring.func_overload edge-casesScott Arciszewski2015-04-011-2/+16
| |
| * Add note to readmeScott Arciszewski2015-04-011-0/+7
| |
| * Allow users to lock their app into an algorithm.Scott Arciszewski2015-04-012-0/+27
|/
* Merge pull request #29 from maurotdo/travis-hhvmChris Raynor2015-02-121-0/+1
|\ | | | | Adds hhvm to travis build targets
| * Update .travis.ymlMauro Maggi2015-02-121-0/+1
|/
* Merge pull request #24 from brendo/iat-claim-checkChris Raynor2014-11-182-9/+35
|\ | | | | Add check for iat claim with some minor documentation updates
| * Minor documentation update for SignatureInvalidExceptionBrendan Abbott2014-11-171-5/+7
| |
| * Add check for iat claim with some minor documentation updatesBrendan Abbott2014-11-172-8/+32
|/
* Merge pull request #23 from firebase/integrationChris Raynor2014-11-149-92/+152
|\ | | | | This closes #22 and #21
| * Porting @brylie's change with a small modificationdrtriumph2014-11-141-2/+2
| |
| * Merge branch 'brendo-integration' into integrationdrtriumph2014-11-149-90/+150
| |\ |/ /
| * Some minor cleanup from @brendo's PR with a quick renamedrtriumph2014-11-146-12/+12
| |
| * Add specific exceptions for checking claims. Fix bad tests for exp and nbf. ↵Brendan Abbott2014-11-136-9/+28
| | | | | | | | RE: firebase/php-jwt#20
| * Add checking of nbf claimBrendan Abbott2014-11-132-1/+32
| |
| * Minor CS changesBrendan Abbott2014-11-134-88/+97
| |