maksimovic/jose-php

JWT, JWS and JWS implementation in PHP

1.0.1 2024-10-25 13:26 UTC

Requires

• php: ^7.2 | ^8.0
• phpseclib/phpseclib: ^2.0

Requires (Dev)

• phpunit/phpunit: ^8.5 | ^9.5

MIT

• Nov Matake
• Oliver Maksimovic

• jwt
• JSON Web Token
• JSON Web Signature
• JSON Web Encryption
• JWS
• JWE
• JOSE
• OpenID Connect
• ID Token

README

.: Fork with verified support for PHP 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.4

JOSE

PHP JOSE (Javascript Object Signing and Encryption) Implementation

Installation

composer install maksimovic/jose-php

Requirements

phpseclib is required. http://phpseclib.sourceforge.net

Example

JWT

Encoding

$jwt = new JOSE_JWT(array(
    'foo' => 'bar'
));
$jwt->toString();

Decoding

$jwt_string = 'eyJ...';
$jwt = JOSE_JWT::decode($jwt_string);

JWS

Signing

$private_key = "-----BEGIN RSA PRIVATE KEY-----\n....";
$jwt = new JOSE_JWT(array(
    'foo' => 'bar'
));
$jws = $jwt->sign($private_key, 'RS256');

NOTE: $private_key can be phpseclib\Crypt\RSA instance.

Verification

$public_key = "-----BEGIN RSA PUBLIC KEY-----\n....";
$jwt_string = 'eyJ...';
$jws = JOSE_JWT::decode($jwt_string);
$jws->verify($public_key, 'RS256');

NOTE: $public_key can be JOSE_JWK or phpseclib\Crypt\RSA instance.

JWE

Encryption

$jwe = new JOSE_JWE($plain_text);
$jwe->encrypt(file_get_contents('/path/to/public_key.pem'));
$jwe->toString();

Decryption

$jwt_string = 'eyJ...';
$jwe = JOSE_JWT::decode($jwt_string);
$jwe->decrypt($private_key);

JWK

Encode

RSA Public Key

$public_key = new phpseclib\Crypt\RSA();
$public_key->loadKey('-----BEGIN RSA PUBLIC KEY-----\n...');
JOSE_JWK::encode($public_key); # => JOSE_JWK instance

RSA Private Key

$private_key = new phpseclib\Crypt\RSA();
$private_key->setPassword($pass_phrase); # skip if not encrypted
$private_key->loadKey('-----BEGIN RSA PRIVATE KEY-----\n...');
JOSE_JWK::encode($private_key); # => JOSE_JWK instance

Decode

RSA Public Key

# public key
$components = array(
    'kty' => 'RSA',
    'e' => 'AQAB',
    'n' => 'x9vNhcvSrxjsegZAAo4OEuo...'
);
JOSE_JWK::decode($components); # => phpseclib\Crypt\RSA instance

RSA Private Key

Not supported.

Run Test

git clone git://github.com/maksimovic/jose-php.git
cd jose-php
composer install
vendor/bin/phpunit test

Copyright

Copyright © 2013 Nov Matake & GREE Inc. See LICENSE for details.