diff --git a/composer.json b/composer.json
index 6b28ab5..cfafe40 100644
--- a/composer.json
+++ b/composer.json
@@ -18,8 +18,8 @@
         "keycloak"
     ],
     "require": {
-        "league/oauth2-client": "^2.0",
-        "firebase/php-jwt": "^4.0"
+        "league/oauth2-client": "^2.0 <2.3.0",
+        "firebase/php-jwt": "~4.0|~5.0"
     },
     "require-dev": {
         "phpunit/phpunit": "~4.0",