Skip to content

Release 8.18.0 #803

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kishore7snehil merged 8 commits into from
Dec 16, 2025
Merged

Release 8.18.0 #803

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
c9c3607
Release 8.18.0
kishore7snehil Dec 16, 2025
0bd2d13
Merge branch 'main' into release/8.18.0
kishore7snehil Dec 16, 2025
38a5f97
test: add explicit audience configuration for access token validation
kishore7snehil Dec 16, 2025
49a731c
refactor: add token type detection based on nonce claim presence
kishore7snehil Dec 16, 2025
143c68d
test: remove nonce claim from access token generation to align with O…
kishore7snehil Dec 16, 2025
d665f0e
chore: add nonce-based token type detection to prevent ID token misus…
kishore7snehil Dec 16, 2025
526ff7a
Merge branch 'main' into release/8.18.0
kishore7snehil Dec 16, 2025
fc475bf
test: revert nonce claim changes in token generators to restore origi…
kishore7snehil Dec 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .version
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
8.17.0
8.18.0
7 changes: 7 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
# Change Log

## [8.18.0](https://github.com/auth0/auth0-PHP/tree/8.18.0) (2025-12-16)
[Full Changelog](https://github.com/auth0/auth0-PHP/compare/8.17.0...8.18.0)

**Fixed**

- Security fix: Resolve CVE-2025-68129

## [8.17.0](https://github.com/auth0/auth0-PHP/tree/8.17.0) (2025-10-01)
[Full Changelog](https://github.com/auth0/auth0-PHP/compare/8.16.0...8.17.0)

Expand Down
2 changes: 1 addition & 1 deletion src/Auth0.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ final class Auth0 implements Auth0Interface
/**
* @var string
*/
public const VERSION = '8.17.0';
public const VERSION = '8.18.0';

/**
* Authentication Client.
Expand Down
4 changes: 2 additions & 2 deletions tests/Utilities/TokenGenerator.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ protected static function getIdTokenClaims(
'sid' => '__test_sid__',
'iss' => 'https://domain.test/',
'aud' => '__test_client_id__',
// 'nonce' => '__test_nonce__', Only ID tokens should have nonce claims
'nonce' => '__test_nonce__',
'auth_time' => time() - 100,
'exp' => time() + 1000,
'iat' => time() - 1000,
Expand All @@ -43,7 +43,7 @@ protected static function getAccessTokenClaims(
'iss' => 'https://domain.test/',
'sid' => '__test_sid__',
'aud' => '__test_client_id__',
'nonce' => '__test_nonce__',
// 'nonce' => '__test_nonce__', Only ID tokens should have nonce claims
'auth_time' => time() - 100,
'exp' => time() + 1000,
'iat' => time() - 1000,
Expand Down
Loading