Update to latest auth0-PHP dependency

.circleci/config.yml

@@ -4,12 +4,31 @@ commands:
   prepare:
     steps:
       - checkout
-      - run: sudo composer self-update
-      - restore_cache:
-          keys:
-            - composer-v1-{{ .Environment.CIRCLE_JOB }}-{{ checksum "composer.json" }}
-            - composer-v1-{{ .Environment.CIRCLE_JOB }}
-      - run: composer update --prefer-dist --no-interaction
+      - run:
+          name: Perform composer self-update
+          command: sudo composer self-update
+      - restore-cache
+      - run:
+          name: Enable code coverage
+          command: |
+            sudo apt update
+            sudo apt install libonig-dev
+            sudo pecl install pcov
+            sudo docker-php-ext-enable pcov
+            sudo rm /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini
+            sudo docker-php-ext-install posix
+            sudo docker-php-ext-install pcntl
+            sudo docker-php-ext-install mbstring
+      - run:
+          name: Install composer dependencies
+          command: composer install --no-interaction --prefer-dist
+      - run:
+          name: Update composer dependencies
+          command: composer update --prefer-dist --no-interaction
+      - save-cache
+
+  save-cache:
+    steps:
       - persist_to_workspace:
           root: .
           paths:
@@ -19,63 +38,108 @@ commands:
           key: composer-v1-{{ .Environment.CIRCLE_JOB }}-{{ checksum "composer.json" }}
           paths:
             - vendor
-  run-php-compatibility:
-    steps:
-      - run: composer compat
-  run-static-analysis:
+
+  restore-cache:
     steps:
-      - run: composer analyze
-  run-unit-tests:
+      - restore_cache:
+          keys:
+            - composer-v1-{{ .Environment.CIRCLE_JOB }}-{{ checksum "composer.json" }}
+            - composer-v1-{{ .Environment.CIRCLE_JOB }}
+
+  run-php-codesniffer:
     steps:
-      - run: composer test
-      - store_artifacts:
-          path: build/coverage.xml
+      - run:
+          name: Run code quality analysis (PHP CodeSniffer)
+          command: php ./vendor/bin/phpcs
 
-jobs:
-  php_7_3:
-    docker:
-      - image: circleci/php:7.3
+  run-phpstan:
     steps:
-      - prepare
-      - run-php-compatibility
-      - run-static-analysis
-      - run-unit-tests
-  php_7_4:
-    docker:
-      - image: circleci/php:7.4
+      - run:
+          name: Run static code analysis (PHPStan)
+          command: php ./vendor/bin/phpstan analyze
+
+  run-phpunit:
     steps:
-      - prepare
-      - run-static-analysis
-      - run-unit-tests
-  php_8_0:
+      - run:
+          name: Run unit tests (PHPUnit)
+          command: php ./vendor/bin/phpunit --stop-on-failure --coverage-clover=build/coverage/coverage.xml --coverage-xml=build/coverage/coverage-xml --log-junit=build/coverage/junit.xml
+      - persist_to_workspace:
+          root: .
+          paths:
+            - src
+            - tests
+            - infection.json.dist
+            - phpunit.xml.dist
+            - build
+            - vendor
+
+jobs:
+  run-unit-tests:
+    parameters:
+      php:
+        type: string
     docker:
-      - image: circleci/php:8.0
+      - image: circleci/php:<< parameters.php >>
     steps:
       - prepare
-      - run-static-analysis
-      - run-unit-tests
-  snyk:
+      - run-php-codesniffer
+      - run-phpstan
+      - run-phpunit
+
+  run-security-tests:
     docker:
       - image: snyk/snyk-cli:composer
     steps:
       - attach_workspace:
           at: .
       - run: snyk test
       - run:
-          command: |
-            if [[ "${CIRCLE_BRANCH}" == "master" ]]
-            then
-            snyk monitor --org=auth0-sdks --project-name=laravel-auth0
-            fi
+          command: snyk monitor --org=auth0-sdks --project-name=laravel-auth0
           when: always
 
+  run-codecov-uploader:
+    docker:
+      - image: circleci/php:7.4
+    steps:
+      - attach_workspace:
+          at: .
+      - restore-cache
+      - run:
+          name: Download and validate Codecov uploader
+          command: |
+            curl https://keybase.io/codecovsecurity/pgp_keys.asc | gpg --import
+            curl -Os https://uploader.codecov.io/latest/linux/codecov
+            curl -Os https://uploader.codecov.io/latest/linux/codecov.SHA256SUM
+            curl -Os https://uploader.codecov.io/latest/linux/codecov.SHA256SUM.sig
+            gpg --verify codecov.SHA256SUM.sig codecov.SHA256SUM
+            shasum -a 256 -c codecov.SHA256SUM
+            chmod +x codecov
+      - run:
+          name: Upload coverage reports to Codecov
+          command: ./codecov -t ${CODECOV_TOKEN} -f ./build/coverage/coverage.xml
+
 workflows:
-  build-and-test:
+  run-tests:
     jobs:
-      - php_7_3
-      - php_7_4
-      - php_8_0
-      - snyk:
+      - run-unit-tests:
+          name: run-phpunit-7.3
+          php: "7.3"
+      - run-unit-tests:
+          name: run-phpunit-7.4
+          php: "7.4"
+      - run-unit-tests:
+          name: run-phpunit-8.0
+          php: "8.0"
+      - run-security-tests:
+          filters:
+            branches:
+              only:
+                - main
           context: snyk-env
-          requires:
-            - php_7_3
+          requires: [run-phpunit-7.3]
+      - run-codecov-uploader:
+          filters:
+            branches:
+              only:
+                - main
+          requires: [run-phpunit-7.4]