fix backward compatibility

composer.json

@@ -8,7 +8,7 @@
         "ext-openssl": "*",
         "league/event": "^3.0",
         "league/uri": "^7.0",
-        "lcobucci/jwt": "^5.5",
+        "lcobucci/jwt": "^5.0",
         "psr/http-message": "^2.0",
         "defuse/php-encryption": "^2.4",
         "ext-json": "*",

src/AuthorizationValidators/BearerTokenValidator.php

@@ -61,6 +61,11 @@ public function setPublicKey(CryptKeyInterface $key): void
      */
     private function initJwtConfiguration(): void
     {
+        $this->jwtConfiguration = Configuration::forSymmetricSigner(
+            new Sha256(),
+            InMemory::plainText('empty', 'empty')
+        );
+
         $clock = new SystemClock(new DateTimeZone(date_default_timezone_get()));
 
         $publicKeyContents = $this->publicKey->getKeyContents();
@@ -69,16 +74,20 @@ private function initJwtConfiguration(): void
             throw new RuntimeException('Public key is empty');
         }
 
-        $this->jwtConfiguration = Configuration::forSymmetricSigner(
-            new Sha256(),
-            InMemory::plainText('empty', 'empty')
-        )->withValidationConstraints(
+        $validationConstraints = [
             new LooseValidAt($clock, $this->jwtValidAtDateLeeway),
             new SignedWith(
                 new Sha256(),
                 InMemory::plainText($publicKeyContents, $this->publicKey->getPassPhrase() ?? '')
             )
-        );
+        ];
+
+        // TODO: next major release: remove this check
+        if (method_exists($this->jwtConfiguration, 'withValidationConstraints') === true) {
+            $this->jwtConfiguration = $this->jwtConfiguration->withValidationConstraints(...$validationConstraints);
+        } else {
+            $this->jwtConfiguration->setValidationConstraints(...$validationConstraints);
+        }
     }
 
     /**

src/Entities/ClientEntityInterface.php

@@ -42,7 +42,7 @@ public function isConfidential(): bool;
     /*
      * Returns true if the client supports the given grant type.
      *
-     * To be added in a future major release.
+     * TODO: To be added in a future major release.
      */
     // public function supportsGrantType(string $grantType): bool;
 }