Version 8.8.1-v2.1-26.1.00.00 release (#255)

Co-authored-by: root <root@devcenteradmin.docusigntest.com>

Author: garg-mudit

.swagger-codegen-ignore

@@ -39,6 +39,5 @@ autoload.php
 phpunit.xml.dist
 docs/
 test/
-src/ApiClient.php	
 src/ApiException.php
-src/Client/
+src/Client/Auth/**

CHANGELOG.md

@@ -3,6 +3,11 @@ All notable changes to this project will be documented in this file.
 
 See [DocuSign Support Center](https://support.docusign.com/en/releasenotes/) for Product Release Notes.
 
+## [v8.8.1] - eSignature API v2.1-26.1.00.00 - 2026-05-05
+### Changed
+- Replaced JWT dependency: Switched from firebase/php-jwt (^6.0) to adhocore/jwt (^1.1) in composer.json template.
+- Updated JWT import namespace: Changed use Firebase\JWT\JWT to use Ahc\Jwt\JWT in ApiClient.
+
 ## [v8.8.0] - eSignature API v2.1-26.1.00.00 - 2026-03-05
 ### Changed
 - Added support for version v2.1-26.1.00.00 of the DocuSign ESignature API.

README.md

@@ -30,7 +30,7 @@ This client SDK is provided as open source, which enables you to customize its f
 <a id="versionInformation"></a>
 ### Version Information
 - **API version**: v2.1
-- **Latest SDK version**: 8.8.0
+- **Latest SDK version**: 8.8.1
 
 <a id="requirements"></a>
 ### Requirements
@@ -70,7 +70,9 @@ This client has the following external dependencies:
 *   [PHP cURL extension](https://www.php.net/manual/en/intro.curl.php)
 *   [PHP JSON extension](https://php.net/manual/en/book.json.php)
 *   [PHP MBString extension](https://www.php.net/manual/en/intro.mbstring.php)
-*   firebase/php-jwt v6.0
+*   adhocore/jwt v1.1+
+
+> **⚠ Deprecation Notice:** Support for PHP versions below 8.0 will be phased out in the coming months. A new SDK compatible with PHP 8.1 will be released, which replaces adhocore/jwt with firebase/php-jwt v7. We strongly recommend upgrading to PHP 8.1 or later to maintain compatibility with upcoming SDK releases.
 
 <a id="apiReference"></a>
 ## API Reference

composer.json

@@ -22,7 +22,7 @@
         "ext-curl": "*",
         "ext-json": "*",
         "ext-mbstring": "*",
-        "firebase/php-jwt": "^6.0"
+        "adhocore/jwt": "^1.1"
     },
     "require-dev": {
         "phpunit/phpunit": "~4.8",

src/Client/ApiClient.php

@@ -1,8 +1,9 @@
 <?php
+
 /**
  * ApiClient
  *
- * PHP version 5
+ * PHP version 7.4
  *
  * @category Class
  * @package  DocuSign\eSign
@@ -11,13 +12,14 @@
  */
 
 /**
- * DocuSign REST API
+ * Docusign eSignature REST API
  *
- * The DocuSign REST API provides you with a powerful, convenient, and simple Web services API for interacting with DocuSign.
+ * The Docusign eSignature REST API provides you with a powerful, convenient, and simple Web services API for interacting with Docusign.
  *
- * OpenAPI spec version: v2
+ * OpenAPI spec version: v2.1
  * Contact: devcenter@docusign.com
  * Generated by: https://github.com/swagger-api/swagger-codegen.git
+ * Swagger Codegen version: 2.4.21
  */
 
 /**
@@ -32,15 +34,15 @@
 use \DocuSign\eSign\Configuration;
 use \DocuSign\eSign\ObjectSerializer;
 use SebastianBergmann\RecursionContext\InvalidArgumentException;
-use Firebase\JWT\JWT;
-
+use Ahc\Jwt\JWT;
 
 /**
  * ApiClient Class Doc Comment
  *
  * @category Class
  * @package  DocuSign\eSign
- * @author   Swagger Codegen team
+ * @author   Swagger Codegen team <apihelp@docusign.com>
+ * @license  The Docusign PHP Client SDK is licensed under the MIT License.
  * @link     https://github.com/swagger-api/swagger-codegen
  */
 class ApiClient
@@ -53,8 +55,6 @@ class ApiClient
     public static $PUT = "PUT";
     public static $DELETE = "DELETE";
 
-
-
     public static $SCOPE_SIGNATURE = "signature";
     public static $SCOPE_EXTENDED = "extended";
     public static $SCOPE_IMPERSONATION = "impersonation";
@@ -170,14 +170,14 @@ public function getApiKeyWithPrefix($apiKeyIdentifier)
      * @param string $endpointPath path to method endpoint before expanding parameters
      * @param bool   $oAuth        pass true in case of oAuth requests
      *
-     * @throws ApiException on a non 2xx response
+     * @throws DocuSign\eSign\Client\ApiException on a non 2xx response
      * @return mixed
      */
     public function callApi($resourcePath, $method, $queryParams, $postData, $headerParams, $responseType = null, $endpointPath = null, $oAuth = false)
     {
         $headers = [];
 
-        // DocuSign: Add DocuSign tracking headers
+        // Docusign: Add Docusign tracking headers
         $this->config->addDefaultHeader("X-DocuSign-SDK", "PHP");
 
         $url = $this->config->getHost() . $resourcePath;
@@ -220,11 +220,12 @@ public function callApi($resourcePath, $method, $queryParams, $postData, $header
         if ($this->config->getCurlTimeout() !== 0) {
             curl_setopt($curl, CURLOPT_TIMEOUT, $this->config->getCurlTimeout());
         }
+
         // set connect timeout, if needed
         if ($this->config->getCurlConnectTimeout() != 0) {
             curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, $this->config->getCurlConnectTimeout());
         }
-
+        
         // return the result on success, rather than just true
         curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
 
@@ -337,6 +338,7 @@ public function callApi($resourcePath, $method, $queryParams, $postData, $header
             if (json_last_error() > 0) { // if response is a string
                 $data = $http_body;
             }
+
             if(is_object($serializedData)){
                 $serializedData = serialize($serializedData);
             }
@@ -429,7 +431,7 @@ protected function httpParseHeaders($raw_headers)
     /**
      * Helper method to configure the OAuth accessCode/implicit flow parameters
      *
-     * @param string $client_id DocuSign OAuth Client Id(AKA Integrator Key)
+     * @param string $client_id Docusign OAuth Client Id(AKA Integrator Key)
      * @param string|array $scopes the list of requested scopes.  Client applications may be scoped to a limited set of system access.
      * @param string $redirect_uri This determines where to deliver the response containing the authorization code
      * @param string $response_type Determines the response type of the authorization request, NOTE: these response types are
@@ -465,8 +467,8 @@ public function getAuthorizationURI($client_id, $scopes, $redirect_uri, $respons
     /**
      * GenerateAccessToken will exchange the authorization code for an access token and refresh tokens.
      *
-     * @param string $client_id DocuSign OAuth Client Id(AKA Integrator Key)
-     * @param string $client_secret The secret key you generated when you set up the integration in DocuSign Admin console.
+     * @param string $client_id Docusign OAuth Client Id(AKA Integrator Key)
+     * @param string $client_secret The secret key you generated when you set up the integration in Docusign Admin console.
      * @param string $code The authorization code
      *
      * @return array
@@ -505,8 +507,8 @@ public function generateAccessToken($client_id = null, $client_secret = null, $c
     /**
      * Refresh Access Token
      *
-     * @param string $client_id DocuSign OAuth Client Id(AKA Integrator Key)
-     * @param string $client_secret The secret key you generated when you set up the integration in DocuSign Admin console.
+     * @param string $client_id Docusign OAuth Client Id(AKA Integrator Key)
+     * @param string $client_secret The secret key you generated when you set up the integration in Docusign Admin console.
      * @param string $code The authorization code
      *
      * @return array
@@ -544,7 +546,7 @@ public function refreshAccessToken($client_id = null, $client_secret = null, $re
     /**
      * Request JWT User Token
      *
-     * @param  string $client_id DocuSign OAuth Client Id(AKA Integrator Key)
+     * @param  string $client_id Docusign OAuth Client Id(AKA Integrator Key)
      * @param  string $rsa_private_key the RSA private key
      * @param  string|string[] $scopes array optional The list of requested scopes may include (but not limited to) You can also pass any advanced scope.
      * @param  string $user_id
@@ -583,7 +585,15 @@ public function requestJWTUserToken($client_id, $user_id, $rsa_private_key, $sco
             "scope" => is_array($scopes)?implode(" ", $scopes): $scopes
         ];
 
-        $jwt = JWT::encode($claim, $rsa_private_key, 'RS256');
+        $private_key = openssl_pkey_get_private($rsa_private_key);
+        if ($private_key === false && is_file($rsa_private_key)) {
+            $private_key = openssl_pkey_get_private('file://' . $rsa_private_key);
+        }
+        if ($private_key === false) {
+            throw new \InvalidArgumentException('Invalid RSA private key provided when calling requestJWTUserToken');
+        }
+
+        $jwt = (new JWT($private_key, 'RS256'))->encode($claim);
 
         $resourcePath = "/oauth/token";
         $queryParams = [];
@@ -605,7 +615,7 @@ public function requestJWTUserToken($client_id, $user_id, $rsa_private_key, $sco
     /**
      * Request JWT Application Token
      *
-     * @param string $client_id DocuSign OAuth Client Id(AKA Integrator Key)
+     * @param string $client_id Docusign OAuth Client Id(AKA Integrator Key)
      * @param string $rsa_private_key the RSA private key
      * @param string|string[] $scopes array optional The list of requested scopes may include (but not limited to) You can also pass any advanced scope.
      * @param int $expires_in int Number of minutes token will be valid
@@ -639,7 +649,15 @@ public function requestJWTApplicationToken($client_id, $rsa_private_key, $scopes
             "scope" => is_array($scopes)?implode(" ", $scopes):$scopes
         ];
 
-        $jwt = JWT::encode($claim, $rsa_private_key, 'RS256');
+        $private_key = openssl_pkey_get_private($rsa_private_key);
+        if ($private_key === false && is_file($rsa_private_key)) {
+            $private_key = openssl_pkey_get_private('file://' . $rsa_private_key);
+        }
+        if ($private_key === false) {
+            throw new \InvalidArgumentException('Invalid RSA private key provided when calling requestJWTApplicationToken');
+        }
+
+        $jwt = (new JWT($private_key, 'RS256'))->encode($claim);
 
         $resourcePath = "/oauth/token";
         $queryParams = [];
@@ -694,4 +712,4 @@ public function getUserInfo($access_token)
             $httpHeader
         ];
     }
-}
+}

src/Configuration.php

@@ -111,7 +111,7 @@ class Configuration
      *
      * @var string
      */
-    protected $userAgent = 'Swagger-Codegen/v2.1/8.8.0/php/' . PHP_VERSION;
+    protected $userAgent = 'Swagger-Codegen/v2.1/8.8.1/php/' . PHP_VERSION;
 
     /**
      * Debug switch (default set to false)
@@ -774,7 +774,7 @@ public static function toDebugReport()
         $report .= '    OS: ' . php_uname() . PHP_EOL;
         $report .= '    PHP Version: ' . PHP_VERSION . PHP_EOL;
         $report .= '    OpenAPI Spec Version: v2.1' . PHP_EOL;
-        $report .= '    SDK Package Version: 8.8.0' . PHP_EOL;
+        $report .= '    SDK Package Version: 8.8.1' . PHP_EOL;
         $report .= '    Temp Folder Path: ' . self::getDefaultConfiguration()->getTempFolderPath() . PHP_EOL;
 
         return $report;