1.3.4

• Fix: Skip any validation when the authorization header is not Bearer.
• Feature: Added a setting page to share data and add information about the plugin.

1.3.3

• Update php-jwt to 6.4.0
• Fix PHP warnings (#259)
• Fix the condition where it checks if the request is a REST Request (#256)

1.3.2

• Fix conflicts with other plugins using the same JWT library adding a wrapper namespace to the JWT class.

Update PHP Version and Refactoring

• Updating the minimum version of PHP to 7.4
• Validate the signing algorithm against the supported algorithms https://github.com/see https://www.rfc-editor.org/rfc/rfc7518#section-3
• Sanitize the REQUEST_URI and HTTP_AUTHORIZATION values before using them
• Use get_header() instead of $_SERVER to get the Authorization header when possible
• Added typed properties to the JWT_Auth class where possible
• Along with this release, I release a new simple JWT Client App for testing purposes https://github.com/see https://github.com/Tmeister/jwt-client
• WP Code Standards
• Remove unnecessary tests

Update firebase/php-jwt to the latest version 6.3

• Update encode and decode functions to use the new arguments
• Add a new filter to change the algorithm used, default HS256
• Fix warning register_rest_route was called incorrectly
• Allow for Basic Auth, by not attempting to validate Authentication Headers if a valid user has already been determined

1.2.6

Cookies && Token compatibility

• Fix the root problem with gutenberg infinite loops and allow the token validation/generation if the WP cookie exists.
• More info (#138)
• Props: https://github.com/andrzejpiotrowski

1.2.5

• Add Gutenberg Compatibility
• More info (#126)

1.2.4

Version 1.2.4

• Update firebase/php-jwt to v5.0.0 ( https://github.com/firebase/php-jwt )
• Add Requires PHP Tag

1.2.3

Fix Max recursion error in WordPress 4.7 Fix #44

1.2.2

Merge Pull Requests

• Add an extra validation to get the Authorization header
• Increase determine_current_user priority Fix #13
• Add the user object as parameter in the jwt_auth_token_before_sign hook
• Improve error message when auth fails #34
• Tested with WordPress 4.6.1