Root composer.json requires firebase/php-jwt ^6.10.0 (v2025)

PHPMaker General Discussion (PHPMaker)
6

In older versions (< v2026), firebase/php-jwt is used by JWT (REST API). If you check packagist.org, you'll see that all versions < v7 has security issues, so you need to upgrade to v7.

To change the versions, you can use Tools -> Composer Packages to add "firebase/php-jwt" and set the version as "v7.0.0".

  1. Read v7.0.0. release note. It added key size validation.
  2. You better check your JWT signing secret key and see if it is empty or too short. If yes, enter a key with sufficient length.