Firebase/php-jwt v6.x not loaded due to security advisories (v2024)

PHPMaker General Discussion (PHPMaker)
1

Just installed v2026 but still need to maintain v2024 projects.
v2024 projects now fail to generate with a composer error…

Updating dependencies
Your requirements could not be resolved to an installable set of packages.
Problem 1

  • Root composer.json requires firebase/php-jwt ^6.3.0, found firebase/php-jwt[v6.3.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories

I understand what it is saying but I'm not sure how to fix it??

Thanks

11

The ‘problem’ entry appears to be in

C:\Users\sgood\AppData\Roaming\phpmaker2024\node_modules@phpmaker\php2024\composer.json

… where this line appears….

        "firebase/php-jwt": "^6.3.0",

I’m not sure if I should change anything here and if so, to what??

12

In older versions (< v2026), firebase/php-jwt is used by JWT (REST API). If you check packagist.org, you'll see that all versions < v7 has security issues, so you need to upgrade to v7.

To change the versions, you can use Tools -> Composer Packages to add "firebase/php-jwt" and set the version as "v7.0.0".

13

That fixed it! Thank you so much for all your help with this - I’ve never have got there myself.

15

I (also) followed the instructions given in the other post. It worked. Thank you,

16

Edit composer.json at your phpmaker 2024 template. Add:

"scripts": {
"routes": ProjectNamespace + "\RouteAttributes::dispatch"
}
}

"config": {
"platform": {
"php": IsPhp81() ? PhpVersion() : "8.0.2"
},
"allow-plugins": true,
"audit": {
"block-insecure": false,
"ignore": ["PKSA-xxxx-xxxx-xxxx"]
}
},

Note: xxxx = replase with your red warning.