lexik/LexikJWTAuthenticationBundle
Stars: 2436
Forks: 611
Pull Requests: 421
Issues: 709
Watchers: 51
Last Updated: 2023-09-04 09:34:51
JWT authentication for your Symfony API
License: MIT License
Languages: PHP
LexikJWTAuthenticationBundle
This bundle provides JWT (Json Web Token) authentication for your Symfony API.
It is compatible (and tested) with PHP 7.1+ on Symfony 4.x, 5.x and 6.x.
Documentation
The bulk of the documentation is stored in the Resources/doc directory of this bundle:
Community Support
Please consider opening a question on StackOverflow using the lexikjwtauthbundle tag, it is the official support platform for this bundle.
Github Issues are dedicated to bug reports and feature requests.
Contributing
See the CONTRIBUTING file.
Sponsoring
Huge thanks to Blackfire and JetBrains for providing this project with free open-source licenses.
If you or your company use this package, please consider sponsoring its maintenance and development.
Upgrading from 1.x
Please see the UPGRADE file.
Credits
License
This bundle is under the MIT license.
For the whole copyright, see the LICENSE file distributed with this source code.
OPEN ISSUES
See all- Unauthorized under Multiple entity managers, jwt was authorizing the user but checking the first provider written under firewall. by @arunmit
- XML Configuration by @FlorinAsavoaie
- Extending the Key Loader by @MisterGlass
- JWT with no users by @christianwico
- Support looking at multiple name/prefix per token extractor by @chalasr
- Invalid JWT Token by @walkoss
- Trying to catch entered password for an API call by @maximebourdel
- Configure a different key pair per firewall guard by @jolleychris
- Question: Database-less user: initial token creation... by @akomm
- Database-less user provider empty payload by @xhuberdeau
- Using the bundle with token created somewhere else by @greg0ire
- Bypass JWT validation by @alan-printi
- Get entity collections on authentication success? by @vrobinsonscs
- Advice for verification of Firebase idToken by @lashae
- Override the Token Roles by @mnavarrocarter
- Unit tests, generating token by @nWidart
- JWTToken change fields for generate by @shubaivan
- Symfony 3.4 + FOSUserBundle + LexikJWTAuthenticationBundle by @ocdevops
- API Full authentication is required to access this resource. by @Ogek
- Performance - Very slow token generation and validation ? by @abssimon
- Support for remote private keys? by @kenianbei
- KeyLoaderInterface is marked as internal by @lashae
- Error 500 in Login by @Lory1990
- User checker does not trigger authentication failure by @tomasbruckner
- Test API endpoint in an application that doesn't generate token by @hpatoio
- No encoder has been configured by @garak
- The login_check example curl does not work on Windows 10 by @mortenhartvig
- Consider changing default authorization mode (header mode encourages insecure client architecture) by @therealmikz
- Upgarde to 2.6 (deprecation) by @medev87
- Stateless CSRF protection -- "Synchronizer Token Pattern" by @adrienrn
- login_check bad credentials by @dany33code
- Session data destruction on server by @Med-Seif
- How To Get A User From my own IDP : Question by @boscho87
- how to let the data which to response include the auth token prefix 'prefix' by emit `onAuthenticationSuccessResponse` event by @lichnow
- Documentation update by @dtfafard
- [2.6.2] NULL userIdClaim doesn't take value of user_identity_field by @rsida
- how to overload 'api/auth/login route ? by @opal-up
- Keep getting Bad credentials by @Minirock
- LcobucciJWSProvider loads payload as stdclass instead of associative array by @BlackCatPaw
- FOSUserBundle lastLogin (last_login) updated on each request by @Err0r404
- An error occurred while trying to encode the JWT token by @jbiddulph
- httponly cookie expiration event handling by @konshensx16
- Token is invalid when browser closed by @kirannuclear
- Environment variable not found: "JWT_SECRET_KEY" in prod environment by @sirjcbg1
- Services/JWSProvider/LcobucciJWSProvider.php verify method public key by @RokasValiukasNfq
- What is the best way to use both json_login and ApiKey ? by @Rebolon
- Get list of all active tokens by @stipic
- Generate Database-less token with user roles by @leroy0211
- custom authentication failure response by @jessequinn
- how does the lexik library generate the token by @MXP22
- Questions about TTL by @siwica
- HMAC support documentation by @MLDMoritz
- Integrating with existing Symfony auth by @mattdillon100
- JWTDecodedEvent doesn´t work by @Julen10
- Can you provide or anyone a map or recomendation to use this bundle with react and vue in client as SPA with no Symfony on client Side? by @axeljeremy7
- Getting a 404 when trying to authenticate by @patrickmaynard
- Add `expires` to public data in the JWT response by @pdugas
- Configure multiple lexik_jwt_auth by @Taluu
- How to add extra data to the existing login_check route by @xvilo
- Unclear error messages when providers are incorrectly configured by @rapliandras
- onAuthenticationSuccess called twice by @gmuehl
- Extenting LcobucciJWSProvider by @Slandais
- Issue when combining the JWTUserProvider with other (statefull firewall) UserProviders by @jeroendk
- Undefined class constant 'SAMESITE_NONE' by @bmehdi
- Get refresh token when the auth_token is generated by @rkmaier
- When using JWSProviderInterface::load($token) to load a token it's signature is sometimes not verified by @rogiermulders
- Translate error message in AuthenticationFailureHandler when translator is available by @chalasr
- Deprecation getProviderKey by @Spawnrad
- Proposal to somehow handle this error by @zim32
- InsufficientAuthenticationException handling by @abeal-hottomali
- Remove namshi/jose dependency by @wiese
- Misspell: "JWT Token" by @Gregoire-M
- Feature for Mercure dedicated cookie? by @JeremyPasco
- Configure JWT audience claim by @lobodol
- Fatal error Cannot declare trait ForwardCompatAuthenticatorTrait by @rpilote
- Failed to get Impoersonated user JWT Token by @ioneu
- Cannot extend JWTAuthenticator and override loadUser method by @faso-dev
- Addition of the token in the headers by @itokia
- Add user information when login by @AlessandroBakh
- Different token for each firewall by @mathvicot15
- JWTManager uses undefined function "getCredentials" of class "Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken" by @nourheine
- PHP realpath cache and Kubernetes secrets / configmap updates by @lobodol
- How to use LexikJWTAuthenticationBundle as identity provider in many projects? by @DebasishDev2021
- Deprecation : user_identity_field - improve defaults or deprecation message by @EvilSpartans
- Allow setting AuthenticationSuccessEvent response by @agboihip
- Recommended way to rotate keys by @ndench
- TypeError in JWTManager by @magikid
- Infinite token ttl not working by @mervit
- Support an attribute to answer yes when generating keys by @vasilvestre
- Postman Ok, Fetch Not Ok by @helveden
- AWS Cognito by @matiux
- get_jwt enpoint is only working once by @grotemeyer
- Can't create token manually by @zhukovsergei
- Configuration option `user_id_claim` doesn't work as described in deprecation message. by @b3k
- Sentry and LexikJWT are creating fake issues by @ghostlexly
- mongodb with symfony 6 is not passing authentication header by @bocek
- Possibility to define additional identity fields for easy token revocation / logout by @Ninos
- Help Needed! JWT with LDAP 401 `Invalid credentials` error by @simondeeley
- Unrecognized option "api_platform" under "lexik_jwt_authentication" by @sayou
- "AuthenticatorInterface" not found on Security\Guard, Symfony 6.2 by @sayou
- Encypted email for the authentication by @RomainPayGreen
- What's the length of the JWT token? by @gremo
- Not found jwt token exception translate by @furkandura
- Login programmatically does not work by @darkopetreski
- Does not validate token and header by @PartosK
- Create token directly by @muhiddingithub
- JSONWebToken Token naming by @Ahummeling
- Allow further customizations for API Platform integration? by @gremo
RELEASES
See all- Version 1.0.0 by @slashfan
- Version 1.0.1 by @slashfan
- Version 1.0.2 by @slashfan
- Version 1.0.3 by @slashfan
- Version 1.0.4 by @slashfan
- Version 1.0.5 by @slashfan
- Version 1.0.6 by @slashfan
- Version 1.0.7 by @slashfan
- Version 1.0.8 by @slashfan
- Version 1.0.9 by @slashfan
- Version 1.0.10 by @slashfan
- Version 1.1.0 by @slashfan
- Version 1.2.0 by @slashfan
- Version 1.3.0 by @slashfan
- Version 1.3.1 by @slashfan
- Version 1.4.0 by @slashfan
- Version 1.4.1 by @slashfan
- Version 1.4.2 by @slashfan
- Version 1.4.3 by @slashfan
- Version 1.5.0 by @slashfan
- Version 1.5.1 by @slashfan
- Add JWTNotFoundEvent by @chalasr
- Deprecate injection of Request instances in event classes by @chalasr
- Fix BC break by re-injecting request instances internally by @chalasr
- Major v2.0.0 by @chalasr
- Patch v2.0.1 by @chalasr
- Patch v2.0.2 by @chalasr
- Patch v2.0.3 by @chalasr
- Minor v2.1.0 by @chalasr
- Patch v2.1.1 by @chalasr
- Minor v2.2.0 by @chalasr
- Minor v2.3.0 by @chalasr
- Minor v2.4.0 by @chalasr
- v2.4.1 by @chalasr
- v2.4.2 by @chalasr
- v2.4.3 by @chalasr
- v2.4.4 by @chalasr
- v2.5.0 by @chalasr
- v2.5.1 by @chalasr
- v2.5.2 by @chalasr
- v2.5.3 by @chalasr
- v2.5.4 by @chalasr
- v2.6.0 by @chalasr
- v2.6.1 by @chalasr
- v2.6.2 by @chalasr
- v2.6.3 by @chalasr
- v2.6.4 by @chalasr
- v2.6.5 by @chalasr
- v2.7.0 by @chalasr
- v2.8.0 by @chalasr
- v2.9.0 by @chalasr
- v2.10.0 by @chalasr
- v2.10.1 by @chalasr
- v2.10.2 by @chalasr
- v2.10.3 by @chalasr
- v2.10.4 by @chalasr
- v2.10.5 by @chalasr
- v2.10.6 by @chalasr
- v2.11.0 by @chalasr
- v2.11.1 by @chalasr
- v2.11.2 by @chalasr
- v2.10.7 by @chalasr
- v2.11.3 by @chalasr
- v2.12.0 by @chalasr
- v2.12.1 by @chalasr
- v2.12.2 by @chalasr
- v2.12.3 by @chalasr
- v2.12.4 by @chalasr
- v2.12.5 by @chalasr
- v2.12.6 by @chalasr
- v2.13.0 by @chalasr
- v2.14.0 by @chalasr
- v2.14.1 by @chalasr
- v2.14.2 by @chalasr
- v2.14.3 by @chalasr
- v2.14.4 by @chalasr
- v2.15.0 by @chalasr
- v2.15.1 by @chalasr
- v2.16.0 by @chalasr
- v2.19.1 by @chalasr
- v2.19.0 by @chalasr
- v2.18.1 by @chalasr
- v2.18.0 by @chalasr
- v2.17.0 by @chalasr