1.6.1

Add missing $expiresAt parameter when creating a custom token with the Handler.

1.6.0

Allow a custom expiration time for custom tokens.

(see beste/firebase-php#98)

1.5.0

Allow the usage of a custom key store when using the Handler.

1.4.0

Token verification now includes existence checks for claims (follow up to kreait/firebase-php#70)

1.3.0

Tokens that seem to be issued in the future now cause a Firebase\Auth\Token\Exception\IssuedInTheFuture exception. It includes the hint that the system time might not be correct.

1.2.1

Fixed message on UnknownKey exceptions.

1.2.0

Expired tokens now throw a Firebase\Auth\Token\Exception\ExpiredToken exception. It extends the previously thrown Firebase\Auth\Token\Exception\InvalidToken, so existing behaviour doesn't change.

1.1.1

Fixed beste/firebase-php#65: invalid custom token when no claims are given.

1.1.0

Replaced StaticKeyStore with HttpKeyStore, which fetches frech Google Public Keys each time its get() method is invoked. Caching can be implemented by injecting an HTTP client with a cache middleware, e.g. kevinrob/guzzle-cache-middleware.

StaticKeyStore was flawed because it was determined to have outdated keys rather sooner than later.

1.0.1

• Removed non-functional debug header
• Added "php": "^7.0"requirement to composer.json