Support issuer ( iss )claim

[abublihi]

in response of #32

[what-the-diff]

PR Summary

• Addition of issuer configuration options
  Two new configuration options, issuer_enabled and issuer, have been added in the passport-claims.php file. These options provide more control over the authorization process.

• Modification of AccessToken to include Issuer Claim
  The AccessToken.php file was updated to include an 'issuer' claim in the access token when issuer_enabled is set to true and an issuer is defined. This adjustment enhances the security measures of our system, if chosen to be used.

• New Test Methods for Issuer Claim
  Two test methods have been added to the AccessTokenClaimTest.php file. These additional tests ensure the proper functionality of the newly added 'issuer' claim in our access tokens, validating its inclusion or exclusion as configured.

[corbosman]

Sorry I've been traveling. Would it be an idea to only use 1 parameter? Just call it 'issuer', and let the config say:

'issuer' => env('JWT_ISSUER', null)

And the code checks for not null?

[abublihi]

I want to make sure the configuration are more readable, what i mean setting the iss may not mean the iss should be included but also you have to enable it, because it's additional not required, some programmer may confuse that they should set it.

[corbosman]

I don't think people will get confused. Laravel is full of settings where it's either null or set. Having 2 settings means more code to check if it's enabled but not set properly. I would really prefer just env('JWT_ISSUER', null). You could add a comment to the config file saying it should be null, and you could even comment out the whole setting by default. This package has existed for quite a few years and no one ever asked for iss before. It's a very niche thing to need so I don't think many people will get confused. If you look at the #33 , you might even just do what they ended up doing. It's pretty easy nowadays to add your own AccessToken. Then you don't even need my package.

[abublihi]

I know that i can implement my own AccessToken, but for the sake of simplicity i am adding the iss to this package,

now only one setting for the issuer,

[corbosman]

Thanks for the PR, i pushed a 5.3.0 version including your code.