feat: adapt to firebase/php-jwt 6

Author: ArWallef

src/Auth/BasicToJwtBearerAuthenticate.php

@@ -30,7 +30,7 @@ class BasicToJwtBearerAuthenticate extends CakeBasicAuthenticate
 
   public function afterIdentify(Event $event, array $user)
   {
-    $token = JWT::encode(['sub' => $user[$this->getConfig('field')], 'exp' =>  time() + $this->getConfig('duration')], Security::getSalt());
+    $token = JWT::encode(['sub' => $user[$this->getConfig('field')], 'exp' =>  time() + $this->getConfig('duration')], Security::getSalt(), 'HS256');
     $event->getSubject()->response = $event->getSubject()->response->withHeader($this->getConfig('headerKey'), $token);
     $event->result = $user;
   }

src/Auth/JwtBearerAuthenticate.php

@@ -11,6 +11,7 @@
 use Firebase\JWT\ExpiredException;
 use Firebase\JWT\SignatureInvalidException;
 use Firebase\JWT\JWT;
+use Firebase\JWT\Key;
 use Cake\Http\Exception\UnauthorizedException;
 
 class JwtBearerAuthenticate extends CakeBasicAuthenticate
@@ -106,7 +107,7 @@ protected function _decode($token)
   {
     $config = $this->_config;
     try {
-      $payload = JWT::decode($token, $config['key'] ?: Security::getSalt(), $config['allowedAlgs']);
+      $payload = JWT::decode($token, new Key($config['key'] ?: Security::getSalt(), $config['allowedAlgs']));
 
       return $payload;
     } catch (ExpiredException $e) {

src/Auth/Storage/CacheStorage.php

@@ -2,6 +2,7 @@
 namespace Trois\Utils\Auth\Storage;
 
 use Firebase\JWT\JWT;
+use Firebase\JWT\Key;
 use Cake\Utility\Security;
 use Cake\Cache\Cache;
 use Cake\Core\InstanceConfigTrait;
@@ -81,7 +82,7 @@ protected function _decode($token)
   {
     $config = $this->_config;
     try {
-      $payload = JWT::decode($token, $this->_config['token']['key'] ?: Security::getSalt(), $this->_config['token']['allowedAlgs']);
+      $payload = JWT::decode($token, new Key($this->_config['token']['key'] ?: Security::getSalt(), $this->_config['token']['allowedAlgs']));
       return $payload;
     } catch (ExpiredException $e) {
       throw new UnauthorizedException($e->getMessage());

src/Auth/TwoFactorAuthenticate.php

@@ -2,6 +2,7 @@
 namespace Trois\Utils\Auth;
 
 use Firebase\JWT\JWT;
+use Firebase\JWT\Key;
 use Firebase\JWT\ExpiredException;
 use Firebase\JWT\SignatureInvalidException;
 use Cake\Controller\ComponentRegistry;
@@ -82,7 +83,7 @@ protected function _decode($token)
   {
     $config = $this->_config;
     try {
-      $payload = JWT::decode($token, Security::salt(), $this->getConfig('token.allowedAlgs'));
+      $payload = JWT::decode($token, new Key(Security::salt(), $this->getConfig('token.allowedAlgs')));
       return $payload;
     } catch (ExpiredException $e) {
       $this->_registry->getController()->Flash->error($e->getMessage());
@@ -125,7 +126,7 @@ public function authenticate(ServerRequest $request, Response $response)
 
       // create code + token
       $this->genCode();
-      $this->token = JWT::encode(['username' => $user[$this->getConfig('fields.username')],'code' => $hasher->hash($this->code),'exp' =>  time() + $this->getConfig('token.duration')], Security::salt());
+      $this->token = JWT::encode(['username' => $user[$this->getConfig('fields.username')],'code' => $hasher->hash($this->code),'exp' =>  time() + $this->getConfig('token.duration')], Security::salt(), 'HS256');
 
       // transmit
       $transmitted = $this->_transmit($this->code, $user, $request, $response);
@@ -168,7 +169,7 @@ public function authenticate(ServerRequest $request, Response $response)
       if (!$hasher->check($password, $payload->code)) return false;
 
       // set Bearer token for BearerTokenAuth
-      $this->token = JWT::encode(['sub' => $user[$this->getConfig('token.sub')],'exp' =>  time() + $this->getConfig('token.duration')], Security::salt());
+      $this->token = JWT::encode(['sub' => $user[$this->getConfig('token.sub')],'exp' =>  time() + $this->getConfig('token.duration')], Security::salt(), 'HS256');
 
       // if no cookie then pass token as an argument
       if($this->_registry->getController()->Auth->getConfig('storage') != 'Session')

src/Utility/Crypto/JWT.php

@@ -5,18 +5,19 @@
 use Firebase\JWT\ExpiredException;
 use Firebase\JWT\SignatureInvalidException;
 use Firebase\JWT\JWT as FJWT;
+use Firebase\JWT\Key;
 
 class JWT {
 
   public static function encode(array $token, $salt = null)
   {
-    return FJWT::encode($token, $salt? $salt: Security::getSalt());
+    return FJWT::encode($token, $salt? $salt: Security::getSalt(), 'HS256');
   }
 
   public static function decode($token, $salt = null, $allowedAlgs = ['HS256'])
   {
     try {
-      $decoded = FJWT::decode($token, $salt? $salt: Security::getSalt(), $allowedAlgs);
+      $decoded = FJWT::decode($token, new Key($salt? $salt: Security::getSalt(), $allowedAlgs));
     } catch (ExpiredException $e) {
       throw new \Exception("Token expired", 1);
     } catch (SignatureInvalidException $e) {