Replace emarref/jwt with lcobucci/jwt

Refactor all JWT-related components
Replace RS256 with ES256 as a preferred JWT algorithm

api/config/config-test.php

@@ -1,8 +1,11 @@
 <?php
 return [
     'components' => [
-        'user' => [
-            'secret' => 'tests-secret-key',
+        'tokens' => [
+            'hmacKey' => 'tests-secret-key',
+            'privateKeyPath' => codecept_data_dir('certs/private.pem'),
+            'privateKeyPass' => null,
+            'publicKeyPath' => codecept_data_dir('certs/public.pem'),
         ],
         'reCaptcha' => [
             'public' => 'public-key',

api/config/config.php

@@ -10,9 +10,13 @@ return [
     'components' => [
         'user' => [
             'class' => api\components\User\Component::class,
-            'secret' => getenv('JWT_USER_SECRET'),
-            'publicKeyPath' => getenv('JWT_PUBLIC_KEY') ?: 'data/certs/public.crt',
-            'privateKeyPath' => getenv('JWT_PRIVATE_KEY') ?: 'data/certs/private.key',
+        ],
+        'tokens' => [
+            'class' => api\components\Tokens\Component::class,
+            'hmacKey' => getenv('JWT_USER_SECRET'),
+            'privateKeyPath' => getenv('JWT_PRIVATE_KEY_PATH') ?: __DIR__ . '/../../data/certs/private.pem',
+            'privateKeyPass' => getenv('JWT_PRIVATE_KEY_PASS') ?: null,
+            'publicKeyPath' => getenv('JWT_PUBLIC_KEY_PATH') ?: __DIR__ . '/../../data/certs/public.pem',
         ],
         'log' => [
             'traceLevel' => YII_DEBUG ? 3 : 0,