Skip to content

CHANGELOG.md

Latest commit

 

History

History
35 lines (28 loc) · 3.67 KB

CHANGELOG.md

File metadata and controls

35 lines (28 loc) · 3.67 KB
Raw

Changelog

2.2.0 (Jul 14, 2026)

  • generateByTime and generateByTimeWindow now reject a non-positive $window (previously an uncaught DivisionByZeroError) and a negative $timestamp (previously a silent, unintended counter), throwing InvalidArgumentException instead. #26
  • generateByCounter, generateByTime and generateByTimeWindow accept an optional $algorithm parameter (defaults to sha1), enabling HMAC-SHA-256 and HMAC-SHA-512 TOTP per RFC 6238. #26
  • Fixed dynamic truncation in HOTPResult to derive the RFC 4226 offset from the digest's actual final byte, so wider SHA-256/512 digests truncate correctly (no change for SHA-1). #26
  • The time-based methods accept an optional $startTime parameter (RFC 6238 "T0", defaults to 0) to set the Unix time from which time steps are counted. A $startTime later than $timestamp is rejected with InvalidArgumentException, as it would yield a negative time step. #26
  • All new behavior is validated against the RFC 6238 Appendix B SHA-1, SHA-256 and SHA-512 test vectors. These additions are backwards compatible. #26

2.1.0 (Apr 13, 2026)

  • Adopts PSR-12 syntax everywhere (:heart: jrzepa #12)
  • Expands version range for PHPUnit to ensure tests run against PHP 7.2 #16
  • Bump various dev dependancies f88730
  • Test on newer PHP versions #15 86c624 584992 38775b
  • Enables easy local development via a docker container #6403696
  • Minor code cleanup and removal of redundant operations #25

Breaking Changes

  • Bump minimum version - The minimum supported PHP version was raised from 7.2 to 8.0 #25. We encourage you to update your PHP version to stay on top of potential security vulnerabilities and receive the latest performance and bug fixes.

2.0.0 (Dec 20, 2020)

  • Code coverage reporting added (:heart: reedy)
  • Documentation updates and return type hints (:heart: reedy)
  • Github CI Support ac0d8d (:heart: legoktm)

Breaking Changes

  • Bump minimum version - To stay current, the minimum version was bumped from 5.3.3 to 7.2. We encourage you to update your PHP version to stay on top of potential security vulnerabilities and receive the latest performance and bug fixes.

1.0.1 (Apr 11, 2019)

  • Token replay mitigation d24e0d (:heart: reedy)
  • Created composer.json and made available through composer (:heart: reedy)

1.0.0

  • reedy joined the maintainer team
  • Initial Release with a tag