Merge release 4.0.1 into 4.1.x

docs/configuration.md

@@ -19,7 +19,7 @@ In order to use it, you must:
 
 ### Configuration initialisation
 
-The `Lcobucci\JWT\Signer\Key` object is used for symmetric/asymmetric signature.
+The `Lcobucci\JWT\Signer\Key\InMemory` object is used for symmetric/asymmetric signature.
 
 To initialise it, you can pass the key content as a plain text:
 
@@ -90,6 +90,10 @@ $configuration = Configuration::forAsymmetricSigner(
 );
 ```
 
+!!! Important
+    The implementation of ECDSA algorithms have a constructor dependency.
+    Use the `create()` named constructor to avoid having to handle it (e.g.: `Lcobucci\JWT\Signer\Ecdsa\Sha256::create()`).
+
 #### For no algorithm
 
 !!! Warning

src/Token/Plain.php

@@ -80,7 +80,7 @@ public function isExpired(DateTimeInterface $now): bool
             return false;
         }
 
-        return $now > $this->claims->get(RegisteredClaims::EXPIRATION_TIME);
+        return $now >= $this->claims->get(RegisteredClaims::EXPIRATION_TIME);
     }
 
     public function toString(): string

test/unit/Token/PlainTest.php

@@ -521,7 +521,7 @@ public function isExpiredShouldReturnFalseWhenTokenIsNotExpired(): void
      * @uses \Lcobucci\JWT\Token\DataSet
      * @uses \Lcobucci\JWT\Token\Signature
      */
-    public function isExpiredShouldReturnFalseWhenExpirationIsEqualsToNow(): void
+    public function isExpiredShouldReturnTrueWhenExpirationIsEqualsToNow(): void
     {
         $now = new DateTimeImmutable();
 
@@ -530,7 +530,7 @@ public function isExpiredShouldReturnFalseWhenExpirationIsEqualsToNow(): void
             new DataSet([RegisteredClaims::EXPIRATION_TIME => $now], '')
         );
 
-        self::assertFalse($token->isExpired($now));
+        self::assertTrue($token->isExpired($now));
     }
 
     /**

test/unit/Validation/Constraint/ValidAtTestCase.php

@@ -155,7 +155,7 @@ final public function assertShouldNotRaiseExceptionWhenLeewayIsUsed(): void
             RegisteredClaims::EXPIRATION_TIME => $now->modify('-5 seconds'),
         ];
 
-        $constraint = $this->buildValidAtConstraint($this->clock, new DateInterval('PT5S'));
+        $constraint = $this->buildValidAtConstraint($this->clock, new DateInterval('PT6S'));
         $constraint->assert($this->buildToken($claims));
 
         $this->addToAssertionCount(1);