[Dependency] Bump lcobucci/jwt from 4.3.0 to 5.0.0 in /site (Submitty…

…#9547)

Bumps [lcobucci/jwt](https://github.com/lcobucci/jwt) from 4.3.0 to
5.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lcobucci/jwt/releases">lcobucci/jwt's
releases</a>.</em></p>
<blockquote>
<h2>5.0.0</h2>
<h3>Release Notes for <a
href="https://github.com/lcobucci/jwt/milestone/26">5.0.0</a></h3>
<p>This release removes deprecated components, makes PHP 8.1 the minimum
required version, and ships some API improvements.</p>
<h3>5.0.0</h3>
<ul>
<li>Total issues resolved: <strong>2</strong></li>
<li>Total pull requests resolved: <strong>25</strong></li>
<li>Total contributors: <strong>9</strong></li>
</ul>
<h4>BC-break</h4>
<ul>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/979">979:
Builder: make it immutable</a> thanks to <a
href="https://github.com/Slamdunk"><code>@​Slamdunk</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/939">939:
Remove empty Signer, empty Key, empty Signature, empty
<code>string</code>s</a> thanks to <a
href="https://github.com/Slamdunk"><code>@​Slamdunk</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/issues/937">937:
Remove <code>\Lcobucci\JWT\Signer\None</code></a> thanks to <a
href="https://github.com/Slamdunk"><code>@​Slamdunk</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/873">873: Use
abstraction instead of concretion</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/872">872:
Remove deprecated components</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/871">871:
Require PHP 8.1+</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/969">969:
4.3.x merge up into 5.0.x</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
</ul>
<h4>Minor BC-break</h4>
<ul>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/967">967:
Make testing less painful</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
</ul>
<h4>Improvement</h4>
<ul>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/1001">1001:
Support other PSR-20 implementations</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/issues/977">977:
Builder fluent interface is confusing</a> thanks to <a
href="https://github.com/Slamdunk"><code>@​Slamdunk</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/960">960:
Setup Renovate as a replacement for Dependabot</a> thanks to <a
href="https://github.com/Ocramius"><code>@​Ocramius</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/931">931:
Make test assertion more strict</a> thanks to <a
href="https://github.com/peter279k"><code>@​peter279k</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/880">880: PHP
Version constraint: stick to tested versions only</a> thanks to <a
href="https://github.com/Slamdunk"><code>@​Slamdunk</code></a></li>
</ul>
<h4>CI</h4>
<ul>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/1000">1000:
Update docs and CI files</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/999">999: Use
roave/backward-compatibility-check directly</a> thanks to <a
href="https://github.com/lcobucci"><code>@​lcobucci</code></a></li>
</ul>
<h4>Dependencies</h4>
<ul>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/998">998:
Update to PHPUnit 10</a> thanks to <a
href="https://github.com/Slamdunk"><code>@​Slamdunk</code></a></li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/988">988:
Merge release 4.3.0 into 5.0.x</a> thanks to <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/984">984:
Update dependency phpstan/phpstan to ^1.9.4</a> thanks to <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/906">906:
Bump phpstan/phpdoc-parser from 1.7.0 to 1.8.0</a> thanks to <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/905">905:
Bump nikic/php-parser from 4.14.0 to 4.15.1</a> thanks to <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/904">904:
Bump phpstan/phpstan from 1.8.3 to 1.8.5</a> thanks to <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/902">902:
Bump phpstan/phpstan-strict-rules from 1.4.2 to 1.4.3</a> thanks to <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/898">898:
Bump phpstan/phpstan from 1.8.2 to 1.8.3</a> thanks to <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]</li>
<li><a href="https://redirect.github.com/lcobucci/jwt/pull/973">973:
Update all non-major dependencies</a> thanks to <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot]</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/lcobucci/jwt/commit/47bdb0e0b5d00c2f89ebe33e7e384c77e84e7c34"><code>47bdb0e</code></a>
Merge pull request <a
href="https://redirect.github.com/lcobucci/jwt/issues/1001">#1001</a>
from lcobucci/use-clock-from-psr</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/47307cc1057278a3895b9c5ce0ab68a0c627c806"><code>47307cc</code></a>
Mention clock interoperability on docs too</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/3aa05aa8076d3950c29c2b710f78b802d17ea9fd"><code>3aa05aa</code></a>
Move dependency on lcobucci/clock to dev</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/d06abd97d5d1544f5fc1dd4c1ad930117d9cb854"><code>d06abd9</code></a>
Support other PSR-20 implementations</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/e3222ce57281881a86b3070526f38899e76d2ca0"><code>e3222ce</code></a>
Update all non-major dependencies</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/12f504d69990c9eb30b6d054331177950ef80713"><code>12f504d</code></a>
Update dependency phpunit/phpunit to ^10.0.12</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/619f3c6733daa8cb6d31ccd23a85f80504654864"><code>619f3c6</code></a>
Update dependency phpstan/phpstan to ^1.10.2</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/c1b3df73f80e208c8e6d7c5f5ea5b6b1ac590ec6"><code>c1b3df7</code></a>
Update dependency phpstan/phpstan to ^1.10.1</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/6b370403bcad19179d1911a82646826d223c6229"><code>6b37040</code></a>
Merge pull request <a
href="https://redirect.github.com/lcobucci/jwt/issues/1000">#1000</a>
from lcobucci/update-docs</li>
<li><a
href="https://github.com/lcobucci/jwt/commit/835c48a9a0496ffc1156fd200c366a17b09ee205"><code>835c48a</code></a>
Use new way for setting output parameters</li>
<li>Additional commits viewable in <a
href="https://github.com/lcobucci/jwt/compare/4.3.0...5.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=lcobucci/jwt&package-manager=composer&previous-version=4.3.0&new-version=5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Chris Reed <[email protected]>

site/app/libraries/TokenManager.php

@@ -3,7 +3,7 @@
 namespace app\libraries;
 
 use Lcobucci\JWT\Configuration;
-use Lcobucci\JWT\Token\Plain as Token;
+use Lcobucci\JWT\UnencryptedToken as Token;
 use Lcobucci\JWT\Signer\Hmac\Sha256;
 use Lcobucci\JWT\Signer\Key\InMemory;
 use Lcobucci\JWT\Validation\Constraint\IssuedBy;

site/composer.json

@@ -27,7 +27,7 @@
     "doctrine/dbal": "2.13.9",
     "doctrine/orm": "2.16.2",
     "egulias/email-validator": "3.2.6",
-    "lcobucci/jwt": "4.3.0",
+    "lcobucci/jwt": "5.0.0",
     "league/commonmark": "1.6.7",
     "maennchen/zipstream-php": "3.1.0",
     "onelogin/php-saml": "4.1.0",