Bugfixes
- The signature of an ID Token is now verified even if a prior error occured (thanks @kanoblake for reporting the issue and providing a test case)
Enhancements
- ID Tokens must have a valid "auth_time" claim.
- Tokens with an invalid signature now throw a
Firebase\Auth\Token\Exception\InvalidSignatureexception. It extends the previously thrownFirebase\Auth\Token\Exception\InvalidToken,
so existing behaviour doesn't change. - Service Account related errors are now more fine grained.