v1.0.2

What's Changed

• fix: protected $responseCode to allow proper overloading of fetchURL() by @DeepDiver1975 in #433
• release: v1.0.1 by @DeepDiver1975 in #432
• fix: bring back #404 by @DeepDiver1975 in #437
• test: add unit test for SERVER_PORT type cast by @DeepDiver1975 in #438

Full Changelog: v1.0.1...v1.0.2

v1.0.1

What's Changed

• release: 1.0.0 by @DeepDiver1975 in #402
• Update ci and add dependabot by @ricklambrechts in #407
• Update README.md to correct addScope parameter type in 1.0.0 by @jasongill in #405
• chore(deps): bump actions/checkout from 2 to 4 by @dependabot in #416
• chore(deps): bump actions/cache from 3 to 4 by @dependabot in #417
• Cast SERVER_PORT to integer by @timsmid in #404
• Check if subject is equal to subject of id token when verifying JWT claims by @ricklambrechts in #406
• Removed duplicate check on jwks_uri and only check if jwks_uri exists when needed by @ricklambrechts in #373
• fix: method signatures after 1.0 release by @DeepDiver1975 in #427
• fix: handle JWT decode of non JWT tokens by @DeepDiver1975 in #428
• chore: enable dependabot for composer by @DeepDiver1975 in #429
• ci: run GitHub workflows on pull requests and pushes to master by @DeepDiver1975 in #431
• chore(deps): update phpseclib/phpseclib requirement from ~3.0 to ^3.0.7 by @artemboyko43 in #384
• chore(deps-dev): update yoast/phpunit-polyfills requirement from ^1.0 to ^2.0 by @dependabot in #430

New Contributors

• @jasongill made their first contribution in #405
• @dependabot made their first contribution in #416
• @timsmid made their first contribution in #404
• @artemboyko43 made their first contribution in #384

Full Changelog: v1.0.0...v1.0.1

1.0.0

v1.0.0

release: 1.0.0

v0.9.10

Fixed

• private_key_jwt and client_secret_jwt need to explicitly be enabled #331

v0.9.9

Added

• Added support for back-channel logout. #302
• Added support for private_key_jwt Client Authentication method #322

Fixed

• Harden self-signed JWK header usage. #323

v0.9.8

Fixed

• Do not use PKCE if IdP does not support it. #317

v0.9.7

Added

• Support for Self-Contained JWTs. #308
• Support for RFC8693 Token Exchange Request. #275

Fixed

• PHP 5.4 compatibility. #304
• Use session_status(). #306

v0.9.6

Added

• Support for phpseclib/phpseclib version 3. #260
• Support client_secret on token endpoint with PKCE. #293
• Added new parameter to requestTokens() to pass custom HTTP headers #297

Changed

• Allow serializing OpenIDConnectClient using serialize() #295

v0.9.5

Changed

• signOut() Method parameter $accessToken -> $idToken to prevent confusion about access and id tokens usage. #127
• Fixed issue where missing nonce within the claims was causing an exception. #280

v0.9.4

Added

• Enabled client_secret_basic authentication on refreshToken() #215
• Basic auth support for requestResourceOwnerToken #271