5.0.0-BETA0

Warning This is a beta release and is subject to breaking changes. It is not recommended for production use, but your feedback and help in testing is appreciated!

Note This package will be renamed once 5.0 is released. Users of previous releases will begin receiving a deprecation notice in Composer to upgrade their projects to 5.0 and use the new package name, at their earliest convenience.

Version 5.0 of Auth0's Symfony SDK introduces a number of exciting new features, including full support for PHP 8.0+ and Symfony 6.1+, an upgrade to Auth0's latest Auth0-PHP SDK v8, and full authentication support. The bundle has been completely rewritten to take advantage of the latest Symfony security APIs, and uses an updated configuration format that is more accessible and simpler to maintain, among other improvements.

BETA-0 focuses on the migration of the core classes to the new bundle structure and security APIs. BETa1 will expand support for Symfony's integrated caching mechanisms.

Please review the updated README.md for guidance on updating your application.

4.0.0

Full Changelog

This release introduces PHP 8.0 support and upgrades the bundle to use Auth0's PHP SDK 7.x branch. It also includes expanded JWT validation options, upgraded caching support, a simplified configuration format, and other improvements.

This release includes potential breaking changes that may require minor changes to host applications to support. Please review UPGRADING.md for guidance on updating your application.

Added

• Introduce PHP 8.0 support #108 (olix21)
• Update to latest Auth0 PHP SDK version #108 (evansims)
  • Configuration format updated. See README for example.
  • Cache support updated to support PSR-6 or PSR-16 caches. This cache is handed off to the Auth0 PHP SDK for use in JWK fetching.
  • Added opt-in JWT validation checks around nonce, azp, org_id, and aud claims, and support for max_age and leeway checks.
  • Enforces strict typing and expands type hinting.
  • Upgrades to PHPUnit 9, and updates unit tests to support syntax changes.
  • Adds unit tests for new helper classes.
  • Adds phpcs and phpstan checks.
• Adds support for Auth0 Organizations, currently in closed beta testing

Changed

• Use Symfony PSR-6 > PSR-16 cache adapter #110 (darthf1)

3.4.0

Full Changelog

Added

• Add support for autowiring #94 (dunglas)
• Give access to the raw JWT in the user provider #97 (dunglas)

Changed

• Remove unused argument, and unused property #95 (dunglas)

3.3.1

Full Changelog

Fixed

• Configuration authorized_issuer string or array compatibility #89 (antzo)

3.3.0

Full Changelog

Closed issues

• new release #86
• Remove SimplePreAuthenticatorInterface? #80

Added

• Symfony 5 support #87 (darthf1)
• Multiple authorized issuer #85 (antzo)

Fixed

• Fix deprecation Treebuilder::root #79 (darthf1)

3.2.0

Full Changelog

Added

• GuardAuthenticator implementation for Symfony 2.8 and later #75 (niels-nijens)

3.1.0

Closed issues

• Support Symfony4 #55
• Allow multiple audiences in config #54

Added

• Add multiple audiences capability to JWT verification #57 (joshcanhelp)
• Allow symfony/framework-bundle 4.x #56 (ricbra)

3.0.2

Added

• Added support for cache #51 (Nyholm)

3.0.1: Merge pull request #49 from pedropapa/patch-1

[FIX] supported_algs configuration parameter

3.0.0: Merge pull request #46 from auth0/3.x.x-dev

upgrade to auth0php 4 + support for RS256 + optional base64 encoded secrets