From 35569b37300c7476ed5de69784f9552c4f080f47 Mon Sep 17 00:00:00 2001
From: rajutm25 <raju.tummoji@moodle.com>
Date: Mon, 6 Oct 2025 12:54:29 +0530
Subject: [PATCH] MDL-86349 libraries: Upgrade PHP-JWT to v6.11.1

---
 public/lib/php-jwt/CHANGELOG.md      | 7 +++++++
 public/lib/php-jwt/README.md         | 8 ++++----
 public/lib/php-jwt/readme_moodle.txt | 2 +-
 public/lib/php-jwt/src/JWT.php       | 4 ++--
 public/lib/thirdpartylibs.xml        | 2 +-
 5 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/public/lib/php-jwt/CHANGELOG.md b/public/lib/php-jwt/CHANGELOG.md
index 01fcc077414..7b5f6ce40c2 100644
--- a/public/lib/php-jwt/CHANGELOG.md
+++ b/public/lib/php-jwt/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [6.11.1](https://github.com/firebase/php-jwt/compare/v6.11.0...v6.11.1) (2025-04-09)
+
+
+### Bug Fixes
+
+* update error text for consistency ([#528](https://github.com/firebase/php-jwt/issues/528)) ([c11113a](https://github.com/firebase/php-jwt/commit/c11113afa13265e016a669e75494b9203b8a7775))
+
 ## [6.11.0](https://github.com/firebase/php-jwt/compare/v6.10.2...v6.11.0) (2025-01-23)
 
 
diff --git a/public/lib/php-jwt/README.md b/public/lib/php-jwt/README.md
index 04252693ca9..e45ccb80846 100644
--- a/public/lib/php-jwt/README.md
+++ b/public/lib/php-jwt/README.md
@@ -291,7 +291,7 @@ $jwks = ['keys' => []];
 
 // JWK::parseKeySet($jwks) returns an associative array of **kid** to Firebase\JWT\Key
 // objects. Pass this as the second parameter to JWT::decode.
-JWT::decode($payload, JWK::parseKeySet($jwks));
+JWT::decode($jwt, JWK::parseKeySet($jwks));
 ```
 
 Using Cached Key Sets
@@ -350,7 +350,7 @@ use InvalidArgumentException;
 use UnexpectedValueException;
 
 try {
-    $decoded = JWT::decode($payload, $keys);
+    $decoded = JWT::decode($jwt, $keys);
 } catch (InvalidArgumentException $e) {
     // provided key/key-array is empty or malformed.
 } catch (DomainException $e) {
@@ -380,7 +380,7 @@ like this:
 use Firebase\JWT\JWT;
 use UnexpectedValueException;
 try {
-    $decoded = JWT::decode($payload, $keys);
+    $decoded = JWT::decode($jwt, $keys);
 } catch (LogicException $e) {
     // errors having to do with environmental setup or malformed JWT Keys
 } catch (UnexpectedValueException $e) {
@@ -395,7 +395,7 @@ instead, you can do the following:
 
 ```php
 // return type is stdClass
-$decoded = JWT::decode($payload, $keys);
+$decoded = JWT::decode($jwt, $keys);
 
 // cast to array
 $decoded = json_decode(json_encode($decoded), true);
diff --git a/public/lib/php-jwt/readme_moodle.txt b/public/lib/php-jwt/readme_moodle.txt
index e12cdcc6e92..1bf1cffac0e 100644
--- a/public/lib/php-jwt/readme_moodle.txt
+++ b/public/lib/php-jwt/readme_moodle.txt
@@ -2,7 +2,7 @@ Description of php-jwt library import into Moodle
 
 Dependencies
 ------------
-- The lib/lti1p3 library currently depends on version 6.0 of php-jwt.
+- The lib/lti1p3 library currently depends on version 6.11.1 of php-jwt.
 - There are usages of this library in mod/lti too. Please check these.
 
 Instructions
diff --git a/public/lib/php-jwt/src/JWT.php b/public/lib/php-jwt/src/JWT.php
index dd9292a4314..833a415e691 100644
--- a/public/lib/php-jwt/src/JWT.php
+++ b/public/lib/php-jwt/src/JWT.php
@@ -154,7 +154,7 @@ class JWT
         // token can actually be used. If it's not yet that time, abort.
         if (isset($payload->nbf) && floor($payload->nbf) > ($timestamp + static::$leeway)) {
             $ex = new BeforeValidException(
-                'Cannot handle token with nbf prior to ' . \date(DateTime::ISO8601, (int) $payload->nbf)
+                'Cannot handle token with nbf prior to ' . \date(DateTime::ISO8601, (int) floor($payload->nbf))
             );
             $ex->setPayload($payload);
             throw $ex;
@@ -165,7 +165,7 @@ class JWT
         // correctly used the nbf claim).
         if (!isset($payload->nbf) && isset($payload->iat) && floor($payload->iat) > ($timestamp + static::$leeway)) {
             $ex = new BeforeValidException(
-                'Cannot handle token with iat prior to ' . \date(DateTime::ISO8601, (int) $payload->iat)
+                'Cannot handle token with iat prior to ' . \date(DateTime::ISO8601, (int) floor($payload->iat))
             );
             $ex->setPayload($payload);
             throw $ex;
diff --git a/public/lib/thirdpartylibs.xml b/public/lib/thirdpartylibs.xml
index 50fcf813bea..6c4f7c2c451 100644
--- a/public/lib/thirdpartylibs.xml
+++ b/public/lib/thirdpartylibs.xml
@@ -543,7 +543,7 @@ All rights reserved.</copyright>
     <location>php-jwt</location>
     <name>PHP-JWT</name>
     <description>A simple library to encode and decode JSON Web Tokens (JWT) in PHP, conforming to RFC 7519</description>
-    <version>6.11.0</version>
+    <version>6.11.1</version>
     <license>BSD</license>
     <licenseversion>3-Clause</licenseversion>
     <repository>https://github.com/firebase/php-jwt</repository>