Release 2.4.0

Added

• Webhook decoder – Decode and verify Kinde webhook payloads with JWKS-based validation
• Prompt login – Support for prompt=login in authentication flows
• Invitation code – Invitation code functionality for user flows
• JWKS security – Guard JWKS fetches against untrusted domains; fail-closed domain validation; 5s timeout on JWKS fetch requests
• JWKS cache – Namespace JWKS cache per JWKS URL to avoid cross-tenant cache collisions
• Testing overhaul – Expanded test suite with no-token scenarios, force API tests, feature flag mapping tests, and production logic tests

Fixed

• KindeManagementClient – Initialize JWKS URL to resolve uninitialized property (fixes #76)
• PHP 8.4 – Resolve deprecation issue in customer-related code
• PHP 8.1+ – Fix deprecation warning when exit() is passed null
• PHP 7.4 – Compatibility fixes across the SDK
• JWKS domain guard moved into WebhookDecoder; circular validation removed from Utils
• Enforce JWKS host per call without global mutation; seed webhook JWKS host for validation

Changed

• Document domain guard trade-off; group organization constants; use reflection in all()
• API fetch and feature flag mapping helpers changed to protected; duplicate force API implementations removed
• Code quality and CodeRabbit-suggested changes

v2.3.4

What's Changed

• resolve unreachable code in callback login_link_expired handler by @KeeganBeuthin in #70
• has-functionality-implementation by @KeeganBeuthin in #66
• feat(session): implement session persistence control via KSP claim pa… by @KeeganBeuthin in #67

Full Changelog: v2.3.3...v2.3.4

v2.3.3

What's Changed

• fix prompt issue for register by @KeeganBeuthin in #68

New Contributors

• @KeeganBeuthin made their first contribution in #68

Full Changelog: v2.3.2...v2.3.3

v2.3.2

What's Changed

• feat: implement hardcheck functionality with documentation and tests by @brettchaldecott in #60

Full Changelog: v2.3.1...v2.3.2

v2.3.1

What's Changed

• fix: remove charset from Content-Type header and improve management A… by @brettchaldecott in #57
• feat: remove deprecated start_page and add prompt parameter support by @Koosha-Owji in #59
• Feature/management api header fixes by @brettchaldecott in #58
• fix: improved documentation to correctly reflect configuration and deployment

New Contributors

• @Koosha-Owji made their first contribution in #59

Full Changelog: v2.3.0...v2.3.1

v2.3.0

What's Changed

• Update composer.json
• feat: add framework integration support and configuration structure

New Contributors

• @Krish0369 made their first contribution in #55

Full Changelog: v2.2.0...v2.3.0

v2.2.0

What's Changed

• feat: add JWKS caching functionality

Full Changelog: v2.1.2...v2.2.0

v2.1.2

What's Changed

• Update the composer version
• Feature/management api and header selector fix

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• feat: add billing profile information and API updates

Full Changelog: v2.0.1...v2.1.1