2.0.40

Fixed

• Fix Apple sign-in fatal when is_private_email claim is omitted from the id_token.

2.0.39

Changed

• Update lcobucci/jwt to support 5.x.

2.0.38

Fixed

• Fix RedirectUri::getCallbackUri() using a CP URL for detached installs (cpTrigger = null) when front-end login plugins expect a site URL.

2.0.37

Fixed

• Fix intermittent 401 errors for OAuth integrations when multiple queue workers refresh the same token concurrently.
• Reload OAuth tokens from the database before refreshing and before retrying 401 responses.
• Improve logging when token refresh fails due to invalid_grant (rotated refresh tokens).

2.0.36

Fixed

• Update client_credentials clients handling of scopes.

2.0.35

Changed

• Update pkceVerifier check logic.

2.0.34

Added

• Add RedirectUri helper to assist with redirection handling.

2.0.33

Changed

• Update firebase/php-jwt to support 7.x.

• Remove direct paragonie/random-lib dependency and use native PHP randomness for Twitter PKCE verifier generation.

1.0.44

Changed

• Update firebase/php-jwt to support 7.x.

• Remove direct paragonie/random-lib dependency and use native PHP randomness for Twitter PKCE verifier generation.

2.0.32

Fixed

• Update Marketo to use access_token params.