Given that PKCE is being pushed as a highly recommended strategy by thephpleague, we should consider upgrading to the 8.0 version of the league/oauth2-server. The 8.0 version solves some issues with PKCE, but breaks BC.

See the upgrade guide for more details and these notes from the laravel/passport guys for some undocumented changes.

Comments

olafkarsten created an issue. See original summary.

paul121’s picture

paul121 commented

The latest 5.x release upgraded league/oauth2-server to ^8.0

matt_paz’s picture

matt_paz commented
Related issues: +#3217957: Roadmap for Updated Dependencies
bradjones1’s picture

bradjones1
Primary language English
commented
Status: Active » Closed (outdated)

The linked roadmap covers the spirit of this issue, also PKCE has been added.