UnknownSec Bypass 403

: /var/www/zenithentcare/vendor/kreait/firebase-tokens/ [ drwxrwxr-x ]
name : CHANGELOG.md # CHANGELOG ## Unreleased Ensure compatibility with `lcobucci/jwt` ^4.2 (this time for real) ## 1.16.2 - 2022-08-22 Ensure compatibility with `lcobucci/jwt` ^4.2 ## 1.16.1 - 2021-10-03 Update [lcobucci/jwt](https://github.com/lcobucci/jwt) version constraint to `^3.4.6|^4.0.4|^4.1.5` to prevent misuse of the `LocalFileReference` key. More info: [GHSA-7322-jrq4-x5hf](https://github.com/lcobucci/jwt/security/advisories/GHSA-7322-jrq4-x5hf) ## 1.16.0 - 2021-07-15 - Un-deprecated `Firebase\Auth\Token\Domain\Generator`, `Firebase\Auth\Token\Domain\Verifier` and `\Firebase\Auth\Token\Domain\KeyStore` - Dropped support for unsupported PHP versions. Starting with this release, supported versions are PHP ^7.4 and PHP ^8.0. - Allowed usage of `psr/cache` `^2.0|^3.0` ## 1.15.0 - 2021-04-19 - Use fallback cache duration (defaults to 1 hour) when fetching public keys from Google and the response doesn't contain cache headers. - Add additional URL to fetch Google's public keys. ## 1.14.0 - 2020-12-09 - Drop the `V3` suffix from handlers using `lcobucci/jwt` - Limit support to PHP 8.0.* ## 1.13.0 - 2020-11-29 - Added support for PHP 8.0 ## 1.12.0 - 2020-11-27 - Added Tenant Awareness - Fixed usage of deprecated functionality from `lcobucci/jwt` ## 1.11.0 - 2020-10-04 - Updated dev-dependency on `symfony/cache` to address [CVE-2019-10912](https://github.com/advisories/GHSA-w2fr-65vp-mxw3) - The default branch of the GitHub repository has been renamed from `master` to `main` - if you're using `dev-master` as a version constraint in your `composer.json`, please update it to `dev-main`. - This library can now be used with PHP 8. ## 1.10.0 - 2020-01-14 - Added support for Guzzle 7 - Improved error handling and error messages ## 1.9.1 - 2019-08-26 - Bumped `kreait/clock` to `^1.0.1` (1.0.0 had PHPUnit required as a non-dev dependency) ## 1.9.0 - 2019-08-26 - Re-implemented the functionality in the `Kreait\Firebase\JWT` namespace. - Added `Kreait\Firebase\JWT\CustomTokenGenerator` as the recommended replacement for `Firebase\Auth\Token\Generator` - Added `Kreait\Firebase\JWT\IdTokenVerifier` as the recommended replacement for `Firebase\Auth\Token\Verifier` - After updating, please refer to the [Migration Documentation](MIGRATE-1.x-to-2.0.md) to be ready for the 2.0 release of this library. ## 1.8.1 - 2019-08-20 - `Firebase\Auth\Token\Exception\InvalidToken` can now have any `Throwable` as the `$previous` parameter. ## 1.8.0 - 2019-06-12 - The "auth_time" and "iat" claims are now verified with a 5 minute leeway, this is the [same behaviour as in the Firebase Admin .NET SDK](https://github.com/firebase/firebase-admin-dotnet/pull/29) (thanks [@navee85](https://github.com/navee85)) ## 1.7.2 - 2018-10-27 - ID Tokens must have a valid "auth_time" claim. - The signature of an ID Token is now verified even if a prior error occured (thanks [@kanoblake](https://github.com/kanoblake) for reporting the issue and providing a test case) - Tokens with an invalid signature now throw a `Firebase\Auth\Token\Exception\InvalidSignature` exception. It extends the previously thrown `Firebase\Auth\Token\Exception\InvalidToken`, so existing behaviour doesn't change. ## 1.7.1 - 2018-01-07 - Fix bug that not more than one custom token could be created at a time. ## 1.7.0 - 2018-01-03 - Cache results from the HTTP Key Store in a PSR-16 cache (default: in memory) - Deprecated `Firebase\Auth\Token\Handler`. ## 1.6.1 - 2017-07-12 - Add missing `$expiresAt` parameter when creating a custom token with the Handler. ## 1.6.0 - 2017-07-12 - Allow a custom expiration time for custom tokens. ## 1.5.0 - 2017-04-03 - Allow the usage of a custom key store when using the Handler. ## 1.4.0 - 2017-03-15 - Token verification now includes existence checks for claims (follow up to [kreait/firebase-php#70](https://github.com/kreait/firebase-php/issues/70)) ## 1.3.0 - 2017-03-02 - Tokens that seem to be issued in the future now cause a `Firebase\Auth\Token\Exception\IssuedInTheFuture` exception. It includes the hint that the system time might not be correct. ## 1.2.1 - 2017-03-01 - Fixed message on UnknownKey exceptions. ## 1.2.0 - 2017-02-28 - Expired tokens now throw a `Firebase\Auth\Token\Exception\ExpiredToken` exception. It extends the previously thrown `Firebase\Auth\Token\Exception\InvalidToken`, so existing behaviour doesn't change. ## 1.1.1 - 2017-02-19 - Fixed [https://github.com/kreait/firebase-php/issues/65](kreait/firebase-php#65): invalid custom token when no claims are given. ## 1.1.0 - 2017-02-18 - Replaced `StaticKeyStore` with `HttpKeyStore`, which fetches frech Google Public Keys each time its `get()` method is invoked. Caching can be implemented by injecting an HTTP client with a cache middleware, e.g. [kevinrob/guzzle-cache-middleware](https://github.com/Kevinrob/guzzle-cache-middleware). ## 1.0.1 - 2017-02-07 - Removed non-functional debug header - Added `"php": "^7.0"`requirement to `composer.json` ## 1.0.0 - 2017-02-05 - Initial release