Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | updates README changelog for v5.0.0 (#166)HEADv5.0.0origin/masterorigin/HEADmaster | Brent Shaffer | 2017-06-27 | 1 | -0/+21 |
| | |||||
* | Remove outdated package.xml (#165) | Brent Shaffer | 2017-06-26 | 1 | -77/+0 |
| | |||||
* | added `array` type hinting to `decode` method (#101) | Michał | 2017-06-26 | 1 | -4/+1 |
| | |||||
* | Add new line warning to README (#115) | Chinedu Francis Nwafili | 2017-06-21 | 1 | -0/+6 |
| | |||||
* | Detect invalid Base64 encoding in signature (#162) | Brent Shaffer | 2017-06-21 | 2 | -2/+10 |
| | |||||
* | Add the proper Exception message for all JSON error types by PHP (#110) | Giorgio Balduzzi | 2017-06-21 | 1 | -1/+3 |
| | |||||
* | removes minimum-stabity from composer.json (#161) | Brent Shaffer | 2017-06-21 | 1 | -1/+0 |
| | |||||
* | Updates JWT::verify to handle openssl errors (#159) | Brent Shaffer | 2017-06-21 | 2 | -7/+36 |
| | |||||
* | Fixes travis, adds PHP 7.1, and removes HHVM (#160) | Brent Shaffer | 2017-06-21 | 4 | -26/+8 |
| | |||||
* | Merge pull request #129 from stampycode/patch-1 | Brent Shaffer | 2017-06-21 | 1 | -0/+3 |
|\ | | | | | bugfix: 'kid' not in given key list | ||||
| * | cosmetic updates | Tim Stamp | 2017-01-24 | 1 | -2/+2 |
| | | |||||
| * | bugfix: 'kid' not in given key list | Tim Stamp | 2016-12-12 | 1 | -0/+3 |
| | | | | | | | | if 'kid' value is not found in the given key map, should throw an exception. Instead, it was outputting a php warning for using an undefined index, resulting in a null key. | ||||
* | | example for RS256 openssl (#125) | Henry N | 2017-06-19 | 1 | -0/+54 |
| | | |||||
* | | draft-ietf-oauth-json-web-token-06 --> rfc7519 (#107) | Arjan Keeman | 2017-06-19 | 1 | -1/+1 |
| | | | | | | The README says this package is conform rfc7519 (May 2015) rather than just the 6th draft (valid until June 2013). The implementation seems indeed to be compatible with the rfc. | ||||
* | | Support RS384 and RS512 (#117) | Joost Faassen | 2017-06-19 | 1 | -0/+2 |
|/ | |||||
* | Travis: run tests also under PHP 5.6 and PHP 7.0 (#108) | Petr Kotek | 2016-08-31 | 1 | -0/+2 |
| | |||||
* | Update README for v4.0.0v4.0.0 | Rob DiMarco | 2016-07-17 | 1 | -0/+6 |
| | |||||
* | Add in support for late static binding, so that developers can extend and ↵ | Tom Chapman | 2016-06-28 | 1 | -21/+21 |
| | | | | override variables / methods if they so require (#88) | ||||
* | Fix exceptions classes (#81) | Maks3w | 2016-06-16 | 2 | -9/+11 |
| | | | | | | | | | | | | | | | | | | * Use InvalidArgumentException when $allowed_algs is not array > Exception thrown if an argument is not of the expected type. http://php.net/manual/en/class.invalidargumentexception.php * Use RuntimeExceptions for exceptions related with unencoded data. RuntimeExceptions is the correct exception error source is the decoded data. Note LogicExceptions as defined in PHP documentation implies a modification in the code by the developer. > Exception that represents error in the program logic. This kind of exception should lead directly to a fix in your code. http://php.net/manual/en/class.logicexception.php But the token is a data provided by an external source which is out side of the control of the developer so there is no way of prevent malformed tokens. | ||||
* | Merge pull request #82 from voku/master | Rob DiMarco | 2016-06-16 | 2 | -0/+9 |
|\ | | | | | ".gitattributes" <- prevent installing special files via composer | ||||
| * | [+]: ".gitattributes" <- prevent installing special files via composer | Lars Moelleken | 2016-02-01 | 2 | -0/+9 |
| | | | | | | | | [*]: add missing phpdoc | ||||
* | | Merge pull request #93 from josephmcdermott/specify-current-timestamp | Rob DiMarco | 2016-06-16 | 1 | -3/+13 |
|\ \ | | | | | | | Use static $timestamp instead of time() | ||||
| * | | Commit with Google email address for CLA | Joseph McDermott | 2016-05-03 | 1 | -0/+1 |
| | | | |||||
| * | | Allow timestamp to be specified rather than relying on PHP time() function | Joseph McDermott | 2016-04-29 | 1 | -3/+12 |
| |/ | |||||
* | | Merge pull request #96 from legoktm/patch-1 | Rob DiMarco | 2016-06-16 | 1 | -1/+0 |
|\ \ | | | | | | | Remove newline at beginning of run-tests.sh | ||||
| * | | Remove newline at beginning of run-tests.sh | Kunal Mehta | 2016-06-09 | 1 | -1/+0 |
| |/ | | | | | | | The extra newline trips a warning in lintian when packaging for Debian, so just remove it. | ||||
* | | Merge pull request #76 from akeeman/patch-1 | Rob DiMarco | 2016-06-16 | 1 | -5/+5 |
|\ \ | |/ |/| | Remove null as possible key value in docblock | ||||
| * | Remove null as possible key value in docblock | Arjan Keeman | 2015-12-30 | 1 | -5/+5 |
|/ | | | The docblock states that null is a possible value for $key, however, it clearly results in an exception. | ||||
* | Addresses issue #72 - update link to current spec | Rob DiMarco | 2015-11-18 | 1 | -2/+1 |
| | |||||
* | Merge pull request #66 from firebase/jw-travis-upgrade | Rob DiMarco | 2015-09-08 | 1 | -0/+2 |
|\ | | | | | Update Travis to use their new container infrastructure | ||||
| * | Update Travis to use their new container infrastructure | Jacob Wenger | 2015-09-08 | 1 | -0/+2 |
|/ | | | See [here](http://docs.travis-ci.com/user/migrating-from-legacy/) for details. | ||||
* | Update package.xml and README.md for 3.0.0 releasev3.0.0 | Rob DiMarco | 2015-07-22 | 2 | -3/+15 |
| | |||||
* | Merge pull request #60 from sjones608/nullkey | Rob DiMarco | 2015-07-22 | 2 | -40/+63 |
|\ | | | | | require a non-empty key to decode a JWT | ||||
| * | add use InvalidArgumentException to account for JWT namespace | Steve Jones | 2015-07-21 | 1 | -0/+1 |
| | | |||||
| * | Merge remote-tracking branch 'upstream/master' into nullkey | Steve Jones | 2015-07-21 | 10 | -49/+78 |
| |\ | |/ |/| | |||||
* | | Merge pull request #62 from johanderuijter/docblock | Rob DiMarco | 2015-07-16 | 1 | -22/+33 |
|\ \ | | | | | | | Aligned the DocBlocks | ||||
| * | | Aligned the DocBlocks | Johan de Ruijter | 2015-07-15 | 1 | -22/+33 |
|/ / | | | | | | | Clarified and corrected the documentation where needed. | ||||
* | | Merge pull request #59 from Dashron/master | Rob DiMarco | 2015-07-09 | 10 | -27/+45 |
|\ \ | | | | | | | Add firebase\jwt namespace | ||||
| * | | fix unexpectedvalueexceptions and add unit tests | Aaron Hedges | 2015-07-01 | 2 | -0/+7 |
| | | | |||||
| * | | update example to use new namespace | Aaron Hedges | 2015-07-01 | 1 | -0/+1 |
| | | | |||||
| * | | Add firespace\jwt namespace | Aaron Hedges | 2015-07-01 | 9 | -27/+37 |
| | | | |||||
| | * | require a non-empty key to decode a JWT | Steve Jones | 2015-07-08 | 2 | -40/+62 |
| |/ |/| | |||||
* | | Add composer.phar to gitignore | Rob DiMarco | 2015-07-05 | 2 | -0/+1 |
|/ | |||||
* | Update README and bump to v2.2.0v2.2.0 | Rob DiMarco | 2015-06-22 | 4 | -3/+27 |
| | |||||
* | Merge pull request #53 from mcocaro/master | Rob DiMarco | 2015-06-22 | 2 | -1/+11 |
|\ | | | | | Adding optional headers to send in JWT | ||||
| * | Reversing array merge to avoid overwrites of default headers | Martin Cocaro | 2015-06-18 | 1 | -1/+1 |
| | | |||||
| * | Adding test | Martin Cocaro | 2015-06-17 | 1 | -0/+6 |
| | | |||||
| * | Assigning to header var merged array | Martin Cocaro | 2015-06-17 | 1 | -1/+1 |
| | | |||||
| * | Merging both arrays together | Martin Cocaro | 2015-06-17 | 1 | -1/+1 |
| | | |||||
| * | Adding array_values only | Martin Cocaro | 2015-06-17 | 1 | -1/+1 |
| | | |||||
| * | Adding header options to add | Martin Cocaro | 2015-06-17 | 1 | -1/+5 |
|/ | |||||
* | Add badges for latest release, total downloads, and license | Rob DiMarco | 2015-05-20 | 1 | -0/+3 |
| | |||||
* | Update package.xmlv2.1.0 | Rob DiMarco | 2015-05-20 | 1 | -6/+6 |
| | |||||
* | Update README for v2.1.0 release | Rob DiMarco | 2015-05-20 | 1 | -0/+6 |
| | |||||
* | Merge pull request #47 from firebase/rd-improve-test-isolation | Chris Raynor | 2015-05-20 | 2 | -4/+10 |
|\ | | | | | Reset clock skew / leeway after relevant tests & update README | ||||
| * | Reset clock skew / leeway after relevant tests & update README | Rob DiMarco | 2015-05-18 | 2 | -4/+10 |
| | | |||||
* | | Merge pull request #48 from aztech-forks/master | Rob DiMarco | 2015-05-19 | 2 | -1/+9 |
|\ \ | |/ |/| | Allow using \ArrayAccess as $key in \JWT::decode | ||||
| * | Add tests for \ArrayAccess key chooser | Aztech | 2015-05-19 | 1 | -0/+8 |
| | | |||||
| * | Allow using \ArrayAccess as $key in decode | Thibaud Fabre | 2015-05-19 | 1 | -1/+1 |
|/ | |||||
* | Merge pull request #46 from lcabral37/skew | Rob DiMarco | 2015-05-18 | 3 | -4/+89 |
|\ | | | | | Provide a leeway in verification of times to account for clock skew | ||||
| * | Added tests with leeway value in nbf and iat | Luis Miguel Cabral | 2015-05-15 | 1 | -0/+44 |
| | | |||||
| * | Reverted some tests from first commit | Luis Miguel Cabral | 2015-05-11 | 1 | -9/+3 |
| | | |||||
| * | Changed the leeway to be a static variable | Luis Miguel Cabral | 2015-05-11 | 3 | -9/+44 |
| | | |||||
| * | Provide a leeway time in the verification of timestamps to account for clock ↵ | Luis Miguel Cabral | 2015-04-09 | 2 | -6/+18 |
| | | | | | | | | skew | ||||
* | | Merge pull request #37 from stof/patch-1 | Rob DiMarco | 2015-04-13 | 1 | -1/+0 |
|\ \ | |/ |/| | Remove the useless target-dir setting from the composer config | ||||
| * | Remove the useless target-dir setting from the composer config | Christophe Coevoet | 2015-04-02 | 1 | -1/+0 |
|/ | | | | target-dir was meant to allow using the root of the package as a PSR-4 root and make composer prepend the target dir when installing to make it compatible with PSR-0, before PSR-4 was a reality. This setting is deprecated in Composer in favor of using PSR-4, and it is not needed anyway when using the classmap autoloading. | ||||
* | Merge branch 'master' of github.com:firebase/php-jwt | Rob DiMarco | 2015-04-01 | 1 | -1/+0 |
|\ | |||||
| * | Update composer.json | Chris Raynor | 2015-04-01 | 1 | -1/+0 |
| | | |||||
* | | Add Changelog | Rob DiMarco | 2015-04-01 | 1 | -0/+11 |
|/ | |||||
* | Bump version to 2.0.0v2.0.0 | Rob DiMarco | 2015-04-01 | 2 | -4/+5 |
| | |||||
* | Merge pull request #36 from firebase/cr-additional-tests | Rob DiMarco | 2015-04-01 | 1 | -0/+31 |
|\ | | | | | Add a few add'l tests - more forthcoming | ||||
| * | Add a few add'l tests | Rob DiMarco | 2015-04-01 | 1 | -1/+18 |
| | | |||||
| * | Merge branch 'rd-verify-refactor' into cr-additional-tests | Rob DiMarco | 2015-04-01 | 1 | -1/+1 |
| |\ | |||||
| * | | A few additional tests for none algorithm and an incorrect algorithm | drtriumph | 2015-04-01 | 1 | -0/+14 |
| | | | |||||
* | | | Update README to reflect newly-required algorithms arguments | Rob DiMarco | 2015-04-01 | 1 | -8/+7 |
| | | | |||||
* | | | Merge pull request #35 from firebase/rd-verify-refactor | Chris Raynor | 2015-04-01 | 3 | -61/+42 |
|\ \ \ | | |/ | |/| | Refactor decode() code path to address security vulnerabilities | ||||
| * | | Comment tweaks | Rob DiMarco | 2015-04-01 | 1 | -1/+1 |
| |/ | |||||
| * | Update decode() to require allowed algorithms arg when verifying | Rob DiMarco | 2015-04-01 | 2 | -18/+19 |
| | | |||||
| * | Updates to JWT decode() / verify() path | Rob DiMarco | 2015-04-01 | 3 | -50/+30 |
|/ | |||||
* | Add'l updates to the ./run-tests.sh script | Rob DiMarco | 2015-04-01 | 1 | -7/+1 |
| | |||||
* | Update to ./run-tests.sh | Rob DiMarco | 2015-04-01 | 2 | -12/+3 |
| | |||||
* | Merge pull request #34 from sarciszewski/patch-2 | Rob DiMarco | 2015-04-01 | 1 | -0/+54 |
|\ | | | | | Add GnuPG verified phpunit script | ||||
| * | Add GnuPG verified phpunit script | Scott Arciszewski | 2015-04-01 | 1 | -0/+54 |
| | | |||||
* | | Merge pull request #33 from sarciszewski/patch-1 | Rob DiMarco | 2015-04-01 | 3 | -2/+53 |
|\ \ | |/ |/| | Allow users to lock their app into an algorithm. | ||||
| * | Use native functions when they exist. | Scott Arciszewski | 2015-04-01 | 1 | -0/+3 |
| | | |||||
| * | Harden against mbstring.func_overload edge-cases | Scott Arciszewski | 2015-04-01 | 1 | -2/+16 |
| | | |||||
| * | Add note to readme | Scott Arciszewski | 2015-04-01 | 1 | -0/+7 |
| | | |||||
| * | Allow users to lock their app into an algorithm. | Scott Arciszewski | 2015-04-01 | 2 | -0/+27 |
|/ | |||||
* | Merge pull request #29 from maurotdo/travis-hhvm | Chris Raynor | 2015-02-12 | 1 | -0/+1 |
|\ | | | | | Adds hhvm to travis build targets | ||||
| * | Update .travis.yml | Mauro Maggi | 2015-02-12 | 1 | -0/+1 |
|/ | |||||
* | Merge pull request #24 from brendo/iat-claim-check | Chris Raynor | 2014-11-18 | 2 | -9/+35 |
|\ | | | | | Add check for iat claim with some minor documentation updates | ||||
| * | Minor documentation update for SignatureInvalidException | Brendan Abbott | 2014-11-17 | 1 | -5/+7 |
| | | |||||
| * | Add check for iat claim with some minor documentation updates | Brendan Abbott | 2014-11-17 | 2 | -8/+32 |
|/ | |||||
* | Merge pull request #23 from firebase/integration | Chris Raynor | 2014-11-14 | 9 | -92/+152 |
|\ | | | | | This closes #22 and #21 | ||||
| * | Porting @brylie's change with a small modification | drtriumph | 2014-11-14 | 1 | -2/+2 |
| | | |||||
| * | Merge branch 'brendo-integration' into integration | drtriumph | 2014-11-14 | 9 | -90/+150 |
| |\ |/ / | |||||
| * | Some minor cleanup from @brendo's PR with a quick rename | drtriumph | 2014-11-14 | 6 | -12/+12 |
| | | |||||
| * | Add specific exceptions for checking claims. Fix bad tests for exp and nbf. ↵ | Brendan Abbott | 2014-11-13 | 6 | -9/+28 |
| | | | | | | | | RE: firebase/php-jwt#20 | ||||
| * | Add checking of nbf claim | Brendan Abbott | 2014-11-13 | 2 | -1/+32 |
| | | |||||
| * | Minor CS changes | Brendan Abbott | 2014-11-13 | 4 | -88/+97 |
| | |