The PHP half: the functions, the two key classes and the constants they are called with.
No eval(), so php -l can lint the body. openssl_verify() returns 1, 0 or -1 (-1 is an
error, not "invalid"); keys and certificates are OpenSSLAsymmetricKey and OpenSSLCertificate
objects (lcobucci/jwt types against them), and every function still accepts a PEM string, a
file:// path or the older two-key array.
The PHP half: the functions, the two key classes and the constants they are called with.
No
eval(), sophp -lcan lint the body.openssl_verify()returns 1, 0 or -1 (-1 is an error, not "invalid"); keys and certificates areOpenSSLAsymmetricKeyandOpenSSLCertificateobjects (lcobucci/jwt types against them), and every function still accepts a PEM string, afile://path or the older two-key array.