Awesome JSON Web Token (JWT)

A curated list of awesome libraries and resources about JSON Web Token (JWT), a standard JSON structure, compact, URL-safe means of representing properties (claims) to be transferred between two parties.

Contents

• JWT Libraries
  • C#
  • Golang
  • Java
  • JavaScript
  • PHP
  • Python
  • Ruby
• Resources
  • Specifications
  • Draft Specifications
  • Websites

---

JWT Libraries

C#

• jose-jwt - Minimallistic zero-dependency library for generating, decoding and encryption JSON Web Tokens.

Golang

• go-jose/go-jose - An implementation of JOSE standards (JWE, JWS, JWT) in Go forked from initially developed by Square.
• golang-jwt/jwt - A popular and actively maintained go implementation of JSON Web Tokens.

Java

• com.auth0:java-jwt - Java implementation of JSON Web Token (JWT) developed by Auth0.

JavaScript

• fast-jwt - JSON Web Token implementation used by Fastify official JWT plugin.
• jsonwebtoken - A JavaScript implementation of JSON Web Token maintained by Auth0.

PHP

• firebase/php-jwt - A simple library to encode and decode JSON Web Tokens (JWT) in PHP maintained by Firebase team.
• LexikJWTAuthenticationBundle - Symfony bundle to handle JWT authentication.

Python

• PyJWT - JSON Web Token implementation in Python.

Ruby

• jwt - A Ruby implementation of the JSON Web Token (JWT) standard.

Resources

Specifications

• JSON Web Token (JWT) - JWT specifications used for different tokens.
• JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens - JWT format and validation specifications in the context of OAuth 2.0.
• JSON Web Key (JWK) - JavaScript Object Notation (JSON) data structure that represents a cryptographic key.
• JSON Web Encryption (JWE) - Specifications for JWE which represents encrypted content using JSON-based data structures.
• JSON Web Signature (JWS) - Specifications for JWS which represents content secured with digital signatures.

Draft Specifications

• Selective Disclosure for JWTs (SD-JWT) - Specification for selective disclosure of JWT elements.

Websites

• jwt.io - Reference website crafted by Auth0 (Okta).
• IANA JSON Web Token Claims Registry - Registry listing all registered claims used in JWT.

Contributing

Your contributions are always welcome! Please take a look at the contribution guidelines first.