laravel-auth0

Full Changelog

Auth0 Laravel SDK v7 includes many significant changes over previous versions:

• Support for Laravel 9.
• Support for Auth0-PHP SDK 8.
• New authentication route controllers for plug-and-play login support.
• Improved authentication middleware for regular web applications.
• New authorization middleware for token-based backend API applications.

As expected with a major release, Auth0 Laravel SDK v7 includes breaking changes. Please review the upgrade guide thoroughly to understand the changes required to migrate your application to v7.

Breaking Changes Summary

• Namespace has been updated from Auth0\Login to Auth0\Laravel
• Auth0-PHP SDK dependency updated to V8
• New configuration format
• SDK now self-registers its services and middleware
• New UserProvider API

Full Changelog

Please review the BETA1 changelog notes before upgrading your application from 6.x, as 7.0 is a new major containing breaking changes. As with all beta releases, this should not be considered stable or suitable for production use, but your experimentation with and feedback around it is greatly appreciated.

Changes

• Update Middleware interface checks for custom user model types #263 (sheggi)
• Updated UserProvider API #264 (evansims)
• Add Rector to test suite #265 (evansims)

Full Changelog

Auth0 Laravel SDK v7 includes many significant changes over previous versions:

• Support for Laravel 9.
• Support for Auth0-PHP SDK 8.
• New authentication route controllers for plug-and-play login support.
• Improved authentication middleware for regular web applications.
• New authorization middleware for token-based backend API applications.

As expected with a major release, Auth0 Laravel SDK v7 includes breaking changes. Please review the upgrade guide thoroughly to understand the changes required to migrate your application to v7.

Breaking Changes Summary

• Namespace has been updated from Auth0\Login to Auth0\Laravel
• Auth0-PHP SDK dependency updated to V8
• New configuration format
• SDK now self-registers it's services and middleware

Full Changelog

Added

• Add SDK alias methods for passwordless endpoints #228 (evansims)

Full Changelog

Fixed

• Use fully qualified facade class names #215 (Rezouce)
• Update auth0-PHP dependency #222 (evansims)
• Pass api_identifier config as audience to Auth0\SDK\Auth0 #214 (iSerter)

Full Changelog

Changed

• Add support for Auth0 Organizations #209 (evansims)

Full Changelog

Changed

• Store changes made to the user object during the onLogin event hook #206 (evansims)

Fixed

• Avoid throwing an error when calling getUserByUserInfo() during login callback event when the supplied profile is empty/null #207 (evansims)

Full Changelog

This release introduces support for the release of PHP 8.0 and drops support for Laravel 5.X, which reached its extended end-of-life early last year. Please ensure you are running up to date and supported versions of PHP and Laravel in your environments.

If you are running legacy applications on Laravel 5.X, you can pin 6.1.* of this plugin in your composer.json file, which is our last release that supports that series — but we strongly encourage you to update your project to a supported version of Laravel as soon as possible.

As of this release we support Laravel 6.X, 7.X and 8.X. You can review Laravel's support timelines for these series here.

Added

• Support PHP 8.0 #200 (evansims)

Fixed

• Fix missing return null; in getUserByIdentifier #201 (sebwas)

Full Changelog

Added

• Support Laravel 8 #190 (giannidhooge)

Fixed

• Fix composer.json whitespace issue #192 (jimmyjames)

Full Changelog

Fixed

• Fix access token decoding and validation #183 (jimmyjames)

Full Changelog

This is a major release and includes breaking changes! This release also includes a major version change for the PHP SDK that it relies on. Please see the migration guide for the PHP SDK for more information.

Closed issues

• auth0-PHP 7.0 - State and nonce handling #163
• Cannot use actingAs unit tests functionality #161

Added

• Implement auth0 guard #166 (Tamrael)

Changed

• Use array for Auth0JWTUser and add repo return types #176 (joshcanhelp)
• Update PHP SDK to v7.0.0 #162 (joshcanhelp)
• Bind SessionState handler interface in container #147 (nstapelbroek)

Fixed

• Fix Laravel session management #174 (joshcanhelp)

Full Changelog

Closed issues

• Laravel 7.0 supported release. #171

Fixed

• Fixed PHPDocs #170 (YAhiru)

Added

• Laravel 7 support #167 (giannidhooge)

Full Changelog

Closed issues

• Setting of state_handler in Auth0Service causes "Invalid state" error #154

Fixed

• Allow store and state_handler to be passed in from config #156 (joshcanhelp)
• Add 'persist_refresh_token' key to laravel-auth0 configuration file. #152 (tpenaranda)
• Replace setEnvironment with setEnvProperty #145 (nstapelbroek)

Full Changelog

Closed issues

• Feature request: Add Laravel 6 support #138
• SessionStateHandler should use LaravelSessionStore not SessionStore #125

Added

• Support Laravel 6 #139 (FreekVR)

Fixed

• Use LaravelSessionStore in the SessionStateHandler. #135 (nstapelbroek)

Full Changelog

Closed issues

• Authenticate as a Laravel API user using the Auth0 token #129
• Redirect to previous page after login #122
• Auth0User uses private variables so they cannot be accessed or overridden in child class #120
• API routes broken in auth0-laravel-php-web-app (and in general)? #117
• API returning "token algorithm not supported" #116
• Changing name of user identifier #115
• Possible to use User object functions? #114
• [email protected] breaks Laravel-Auth0 #108
• Extend Illuminate\Foundation\Auth\User #104
• [Bug] Inconsistencies with the singleton Auth0Service #103
• How do you combine Auth0 Lock with Laravel Auth0? #102
• OnLogin callback question #97

Added

• Add composer.lock file #123 (lbalmaceda)

Changed

• Change private properties to protected #132 (joshcanhelp)
• Return null instead of false in Auth0UserProvider. #128 (afreakk)
• Change the visibility of the getter method from private to public #121 (irieznykov)
• Updated required PHP version to 5.4 in composer #118 (dmyers)
• Changed arrays to use short array syntax #110 (dmyers)

Fixed

• Fix cachehandler resolving issues #131 (deviouspk)
• Added the Auth0Service as a singleton through the classname #107 (JCombee)
• Fixed typo #106 (IvanArjona)

Closed issues

• pls change config arg name #95 (ekadesign)

Added

• AutoDiscovery #91 (m1guelpf)
• Added guzzle options to config to allow for connection options #88 (mjmgooch)

Changed

• Change default settings file #96 (joshcanhelp)
• Utilise Auth0->Login to ensure state validation #90 (cocojoe)

Fixed

• Make code comments gender neutral #98 (devjack)
• Fix README and CHANGELOG #99 (joshcanhelp)