Tags

Tags give the ability to mark specific points in history as being important

  • v3.0.0

    25f2599b · Update: Git ignore file, update rules. ·
    Release: Luna Web Authentication - v3.0.0 
    Luna Web Authentication v3.0.0

Major release aligning the module with Luna Core v6.0 and Luna Web v3.0. Also rolls up every breaking change, new
feature, and fix introduced across the v2.x.x line (v2.0.0 - v2.3.1), for consumers upgrading directly from an
earlier v2.x release.

- Bumped shiros/luna to ^6.0 and shiros/luna-web to ^3.0
- WebAuthConstant context key literal values changed (leading underscore removed)
- Adapted to Luna Core v6's ValueManager/Bag method renames (Bag::all() -> Bag::toArray())
- Rolls up v2.x.x breaking changes: exception `context` param rename, JWTConfig::getExpirationTime() int return,
  JWTKeyBuilder normalization removal, JWTMiddleware request-based contract, WebAuthConstant REQUEST_CTX_* renames
  and CONFIG_* constant removal, JWTKeyBuilder from*() renames
- Rolls up v2.x.x new features: module lifecycle methods, PasswordException/JWTException base classes, per-route
  JWT key selection (ROUTE_CTX_JWT_KEY_ID)
- Rolls up v2.x.x fixes: corrected default exception codes/messages across JWT and Password modules (v2.2.2 patch)

Migration required — see Release Notes for the full breaking-change and migration list covering both v3.0.0 and
the full v2.x.x line.

  • v2.3.1

    502bd128 · Add: Support for per-route JWT key selection via 'ROUTE_CTX_JWT_KEY_ID' context parameter. ·
    Release: Luna Web Authentication - v2.3.1 
    Luna Web Authentication v2.3.1

Adds per-route JWT key selection: routes can declare which configured JWT key JWTMiddleware should use to decode
their token via the new ROUTE_CTX_JWT_KEY_ID route context key.

- Added WebAuthConstant::ROUTE_CTX_JWT_KEY_ID
- JWTMiddleware now forwards the route-declared key id to JWTDecoder::decode()

No breaking changes; routes that don't declare a key id keep using the decoder's default key.

  • v2.3.0

    2592cf81 · Update: Rename ConfigBuilder method calls from `buildLuna` to `fromLuna` in password test files. ·
    Release: Luna Web Authentication - v2.3.0 
    Luna Web Authentication v2.3.0

Upgrades to shiros/luna ^5.3 and shiros/luna-web ^2.4, adapting JWTMiddleware to the request-based
PostRoutingMiddlewareInterface contract and trimming/renaming several public constants and methods.

- BREAKING: JWTMiddleware constructor drops the LunaContainer argument; process() now takes RequestInterface
- BREAKING: WebAuthConstant::ROUTE_CTX_JWT(_DATA) renamed to REQUEST_CTX_JWT(_DATA)
- BREAKING: WebAuthConstant CONFIG_PASSWORD_*/CONFIG_JWT_* constants removed (use literal config keys)
- BREAKING: JWTKeyBuilder build*() methods renamed to from*() (fromData, fromKeys, fromHMAC, fromOpenSSL, fromSodium)
- Bumped shiros/luna to ^5.3 and shiros/luna-web to ^2.4

Migration required — see Release Notes for the full list of renamed symbols and updated call sites.

  • v2.2.2

    5f301349 · Update: Format PasswordValidator exception context to single-line array for consistency. ·
    Release: Luna Web Authentication - v2.2.2 
    Luna Web Authentication v2.2.2

Fixes default exception codes/messages across the JWT and Password modules so they carry meaningful HTTP status
codes, and adds a shared JWTException base class.

- Added JWTException base class (DEFAULT_CODE = HTTP::UNAUTHORIZED) as the new parent for all JWT exceptions
- Fixed JWTDecodeException, JWTEncodeException, JWTKeyMalformedException, JWTKeyNotFoundException,
  JWTUnsupportedAlgorithmException to declare real HTTP status codes instead of the generic code 1
- Fixed PasswordInvalidException to declare HTTP::UNAUTHORIZED as its default code
- Fixed PasswordException's default message to be generic instead of invalid-password-specific
- Reformatted PasswordValidator's exception context array for consistency

Migration: code relying on the previous generic exception code (1) or the previous PasswordException message text
for these classes must be updated.

  • v2.2.1

    df48d8c3 · Update: Replace 'parameters' argument with 'context' in... ·
    Release: Luna Web Authentication - v2.2.1 
    Luna Web Authentication v2.2.1

Patch release aligning dependencies with shiros/luna ^5.2 and shiros/luna-web ^2.2, and fixing an internal
compatibility break in JWTExtractor caused by that upgrade.

- Fixed JWTExtractor to use the renamed `context` argument of HttpUnauthorizedException (was `parameters`)
- Bumped shiros/luna to ^5.2 and shiros/luna-web to ^2.2

No consumer-facing API changes; run composer update to receive the bumped dependencies.

  • v2.2.0

    8a4cb300 · Add: Environment configuration template files for the module with placeholder and example values. ·
    Release: Luna Web Authentication - v2.2.0 
    Luna Web Authentication v2.2.0

Reworks test environment provisioning around a token-based dist template resolved at runtime, refreshes
documentation, and updates contributor test-writing guidelines.

- CI now generates env.test.php from env.php.dist, resolving tokens from CI/CD variables
- Added env.php.dist / env.php.example templates; removed the obsolete committed config/env.test.php
- Updated README setup docs and badges
- Refined internal test-comment conventions in .ai/luna-agent.md

Migration: local test runs must copy env.php.dist to env.test.php (path now ./env.test per phpunit.xml) and set LUNA_ENV=test.

  • v2.1.1

    bd87805b · Refactor: Use `WebAuthConstant::CONFIG_FILES` in test configuration loading... ·
    Release: Luna Web Authentication - v2.1.1 
    Luna Web Authentication v2.1.1

Patch release aligning test configuration loading with WebAuthConstant::CONFIG_FILES.

- JWTEncoderTest and PasswordConfigTest now explicitly pass WebAuthConstant::CONFIG_FILES
  to ConfigBuilder::load() for consistent test setup (JIRA#LUNA-35)

  • v2.1.0

    23ddf239 · Remove unused `ContainerException` import from JWTMiddlewareTest. (JIRA#LUNA-35) ·
    Release: Luna Web Authentication - v2.1.0 
    Luna Web Authentication v2.1.0

Introduces PasswordException base class, consolidates the Password exception hierarchy, renames JWT
constants for consistency, and delivers comprehensive test coverage across the module.

- New PasswordException base class with DEFAULT_CODE and DEFAULT_MESSAGE constants (JIRA#LUNA-53)
- Password exceptions unified under PasswordException; default HTTP codes adjusted (JIRA#LUNA-53)
- JWT container constants renamed to route context constants in WebAuthConstant and JWTMiddleware
- Full test coverage added for JWT, Password, Middleware, and DI modules (JIRA#LUNA-35)
- Usage examples and PHPDoc annotations expanded across JWT and Password components

Migration: update references to renamed JWT constants in WebAuthConstant; verify exception handlers
relying on specific HTTP codes from password exceptions.

  • v2.0.0

    860442e5 · Update: Implement lifecycle methods (`update`, `delete`, `start`, `shutdown`)... ·
    Release: Luna Web Authentication - v2.0.0 
    Luna Web Authentication v2.0.0

Major release aligning the module with PHP 8.5, Luna Core v5, and Luna Web v2, with breaking API changes and new lifecycle support.

- PHP requirement raised to >=8.5
- Dependencies bumped: shiros/luna ^5.0, shiros/luna-web ^2.0, firebase/php-jwt ^7.1
- Exception constructor parameter renamed from `parameters` to `context` (breaking)
- JWTConfig::getExpirationTime() now returns int instead of string (breaking)
- Key normalization removed from JWTKeyBuilder (breaking)
- Module lifecycle methods added: update, delete, start, shutdown
- Exception classes now expose DEFAULT_CODE and DEFAULT_MESSAGE constants
- PHPStan level 5 introduced; CI pipeline refactored with static analysis stage

  • v1.4.1

    a26c0da4 · Refactor: Improve clarity in `JWTKeyBuilder` by updating variable names,... · 
    Luna Web Authentication v1.4.1

- Rename parameter `objectOrClass` to `element` when calling `ClassManager::implement`.

  • v1.4.0

    a26c0da4 · Refactor: Improve clarity in `JWTKeyBuilder` by updating variable names,... · 
    Luna Web Authentication v1.4.0

- Refactor `JWTKeyBuilder` to improve clarity by renaming variables and using `FileReader` for file operations.
- Update `composer.json` to bump the `shiros/luna` dependency to `^4.18`.

  • v1.3.0

    0f53db3c · Update: Bump Shiros/Luna dependency to ^4.14 in `composer.json`. · 
    Luna Web Authentication v1.3.0

- Bump the version of 'shiros/luna' to the 'v4.14'.

  • v1.2.0

    03bbae5c · Refactor: Use `FileManager::readAsString` instead of `FileManager::read` in... · 
    Luna Web Authentication v1.2.0

- Bump the version of 'shiros/luna' to the 'v4.11'.

  • v1.1.0

    3bafda57 · Update: Extend copyright license year to 2026 across all applicable files for consistency. · 
    Luna Web Authentication v1.1.0

- Extend copyright years across project files to 2026

  • v1.0.0

    c07b01ca · Update: Project dependencies. Bump the version of 'shiros/luna' to the 'v4.9'. · 
    Luna Web Authentication v1.0.0