Fixed

• Security fix: Resolve Resolve CVE-2025-58769

Fixed

• fix: Remove unused ext-json requirement from composer.json #209 (kishore7snehil)

Fixed

• Security fix: Resolve CVE-2025-47275

Fixed

• fix : Unit Tests #200 (kishore7snehil)
• Removed Deprecated Rules From PHP CS Fixer #195 (kishore7snehil)

This release includes experimental community-contributed support for Symfony 7. If you encounter any issues, please open an issue on GitHub.

Added

• Support for Symfony 7. #188 (mkilmanas)
• Support string concatenation of scopes. #183 (mkilmanas)

Changed

• Dashes in JWT permissions/scopes are now normalized. #184 (mkilmanas)

Fixed

• Fixed an issue in controller constructors using a $container argument. #190 (mkilmanas)

Fixed

• Syntax typo in AuthenticationController::__construct() #180 (mkilmanas)
• Controller container property assignment #179 (mkilmanas)

Changed

• Disallow installation with Symfony 7.0 until fully compatible

Fixed

• Restore method signatures #174 (evansims)

Added

• Implement support for Back-Channel Logout #167 (evansims) ¹

Changed

• Bumped auth0-php dependency version range to ^8.10.
• Raised the minimum supported PHP version to 8.1.
• Added support for Symfony ^6.4.
  • Symfony ^7.0 support will be added in a forthcoming release.

Added

• Organization Name support added for Authentication API and token handling ¹

Changed

• Bumped auth0-php dependency version range to ^8.7.
• Updated telemetry to indicate new symfony package name (previously jwt-auth-bundle.)

Note
¹ To use this feature, an Auth0 tenant must have support for it enabled. This feature is not yet available to all tenants.