Minor v2.2.0

fb1c441 - #312 Ease sharing keys between parties (@chalasr)
664a90c - #311 Handle empty or null authorization header prefix (@chteuchteu)
02d3866 - #303 Throw less missleading exception if SSL keys could not be loaded (@phansys)

Patch v2.1.1

CHANGELOG

b0f6002 - #302 Return user object from User Provider refresh

Minor v2.1.0

CHANGELOG

• b398d64 - #278 Add JWTUserProvider for loading users from the JWT itself (@chalasr)
• 84cfab5 - #287 Avoid override existing properties in failure response (@kevin-lot)

Patch v2.0.3

Changelog

465c72a - #285 Avoid validating key paths before container compilation (@chalasr)
319502f - #283 Ease creating tokens programatically (@chalasr)
4449d68 - #282 Catch exception from lcobucci parser on invalid but correctly formatted token (@chalasr)
2cde8be - #280 Travis: build on sf 3.2 + highest/lowest deps, fix build on hhvm (@chalasr)
c674a1e - #276 Added getProviderKey() to JWTUserToken (@eXtreme)
b133e67 - #269 Improve the structure of the documentation (@chalasr)

Patch v2.0.2

Changelog

• 601d274 #262 Add composer test script
• b745c15 #261 The security token must be authenticated no matter of the user's roles

Patch v2.0.1

Changelog

• fd06833 Set autowiring types on services with many alternatives (#257)

Major v2.0.0

This major release fixes some inconsistencies, avoids some deprecated practices and adds a bunch of new features.

Fix BC break by re-injecting request instances internally

v1.7.1

Fix BC break by reinjecting request instances internally

Deprecate injection of Request instances in event classes

Since Symfony 2.4, the current Request is accessible from the RequestStack.
Before that, we passed the current Request instance across our Events, allowing to return custom responses depending on the Request.

Now, developers just have to inject the request_stack service in their listeners and retrieve the current request as needed.

This release only depreciate the practice to inject and retrieve the request by adding a default null value to all arguments type-hinted as Request, keeping BC almost intact while triggering deprecation notices from constructors and getters, before we totally remove the practice in the v2.0 major release.

Add JWTNotFoundEvent

This release contains some patches fixing different deprecations from third party dependencies.
Plus it contains a nice addition: The JWTNotFoundEvent, making users able to listen on this specific event and customize the response in case of no jwt found in a request.