Lcobucci\JWT\Signer\Key\LocalFileReference is removed at version >5.0 but still used in IdTokenResponse

[BraunLukas]

In the IdTokenResponse class, you're using Lcobucci\JWT\Signer\Key\LocalFileReference:

oauth2-openid-connect-server/src/IdTokenResponse.php

Line 107 in f20665a

$key = LocalFileReference::file($this->privateKey->getKeyPath(), (string)$this->privateKey->getPassPhrase());

However, this class was removed from the package starting with version 5.0.0

You should either remove compatibility with version ^5.0 for now, or update the code to avoid using this class unless it exists.