feat: auth0-php v9 compatibility (6.x beta groundwork)#242
Open
kishore7snehil wants to merge 4 commits into
Open
feat: auth0-php v9 compatibility (6.x beta groundwork)#242kishore7snehil wants to merge 4 commits into
kishore7snehil wants to merge 4 commits into
Conversation
Adds a Service::getManagement() accessor returning a v9 Management API client built from the bundle's existing configuration, since the v8-style getSdk()->management() is non-functional in auth0-php v9. - Require auth0/auth0-php ^9.0@beta and raise the PHP floor to 8.2 - Document the Management API usage and 5.x to 6.x upgrade path - Rebuild the 6.4 LTS example onto Symfony 6.4 with a Management demo - Run CI on the v6 branch
Run phpcs:fix on Service.php (grouped imports, property/method ordering). Comment out the rl-scanner job in release.yml since the RL scanner trust policy only covers main/master, not the v6 branch. Documented that the job must be re-enabled once v6 goes GA and merges into main.
The migration guide (v9_MIGRATION_GUIDE.md) and API reference (reference.md) only exist on auth0-php's v9 branch, not main. Point the README and UPGRADING links there so they resolve until v9 is merged to main.
kishore7snehil
force-pushed
the
feat/v9-compat
branch
from
July 8, 2026 10:54
a72323d to
7c86d8a
Compare
rector/rector 2.5.3+ deprecated JoinStringConcatRector and throws a fatal system error when it is registered, breaking the Rector CI job. Upstream removed the rule with no replacement (stylistic, deemed too context- dependent to generalize), so remove it from the config. No src changes.
rmad17
requested changes
Jul 14, 2026
| | **auth0/auth0-php** | `^8.19` | `^9.0` | | ||
|
|
||
| - Please ensure you are running PHP 8.2 or newer. Support for PHP 8.1 has been dropped. | ||
| - Composer will pull in `auth0/auth0-php` v9 automatically. No package rename is required; the package remains `auth0/auth0-php`. |
There was a problem hiding this comment.
composer.json mentions the version as ^9.0@beta". Is that intentional?
| @@ -16,6 +17,8 @@ final class Service implements ServiceInterface | |||
| { | |||
| public const VERSION = '5.9.0'; | |||
There was a problem hiding this comment.
Do we need to change this version to 6.x.x?
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Auth0 Symfony SDK - auth0-php v9 compatibility
This PR moves the bundle onto auth0-php v9 and lands the groundwork for the upcoming 6.x major. It targets the
v6mainline branch. Version bumps (.version,Service::VERSION, CHANGELOG) are intentionally not included here - those ship in a separaterelease/6.0.0-beta.0PR, mirroring the auth0-php release model.What's New
auth0/auth0-php^9.0@beta, whose Management API is generated from Auth0's OpenAPI specs (typed requests/responses, property-access sub-clients, pagers).Service::getManagement(): a new accessor that returns a v9 Management client built from the bundle's existingdomain/client_id/client_secretconfiguration. It fetches and caches a client-credentials token for you.getManagement().Breaking Changes
^8.19^9.0^8.1>=8.2$auth0->getSdk()->management()$auth0->getManagement()HttpResponse::decodeContent()The v8-style
getSdk()->management()is non-functional in auth0-php v9 and throws aTypeError. UsegetManagement()instead.What's NOT Affected
Authentication flows are unchanged. The authenticator, authorizer, user provider, session store, and the bundled authentication controllers behave exactly as they did in 5.x. Login, callback, profile, and logout were verified end-to-end against v9.
Migration Example
Documentation
README.md: PHP 8.2 requirement, a new "Accessing the Management API" section, and a consolidated support table.UPGRADING.md: a new "5.x to 6.x" section covering the dependency bump and the Management API migration.CI
tests.ymlnow also runs on pushes tov6(PRs intov6already run via the unfilteredpull_requesttrigger).Beta Notice
This is groundwork for a beta release. While the authentication surface is stable, the Management API in auth0-php v9 is itself in beta and minor adjustments may occur before the final 6.0.0.