lcobucci/jwt 3.0.0

Version 3.0.0

on GitHub

For security reasons we recommend that users upgrade to this last version.

Fixes:

• Parser is not relying on alg header to retrieve the signature algorithm (#21)

Improvements:

• Token class simplified (#22)
• JSON decoder is not converting to arrays anymore (#23)

The major thing of this version is that you should now specify the signer in order to verify a token, so one would not be able to forge tokens with different algorithms than the expected one.