web-token / jwt-framework

4.2.7 2026-11-08 15:03 UTC

Requires

• php: >=8.2
• ext-openssl: *
• brick/math: ^0.12|^0.13|^0.14|^0.15|^0.16|^0.17|^0.18|^0.19|^0.20|^1.0
• psr/clock: ^1.0
• psr/event-dispatcher: ^1.0
• spomky-labs/pki-framework: ^1.2.1
• symfony/config: ^7.0|^8.0
• symfony/console: ^7.0|^8.0
• symfony/dependency-injection: ^7.0|^8.0
• symfony/deprecation-contracts: ^2.5|^3.0
• symfony/event-dispatcher: ^7.0|^8.0
• symfony/http-client-contracts: ^3.4
• symfony/http-kernel: ^7.0|^8.0

Requires (Dev)

• ext-curl: *
• ext-gmp: *
• ext-sodium: *
• matthiasnoback/symfony-config-test: ^6.0
• paragonie/sodium_compat: ^1.20|^2.0
• phpbench/phpbench: ^1.2
• roave/security-advisories: dev-latest
• spomky-labs/aes-key-wrap: ^7.0|^8.0
• symfony/browser-kit: ^7.0|^8.0
• symfony/clock: ^7.0|^8.0
• symfony/finder: ^7.0|^8.0
• symfony/framework-bundle: ^7.0|^8.0
• symfony/http-client: ^7.0|^8.0
• symfony/serializer: ^7.0|^8.0
• symfony/var-dumper: ^7.0|^8.0
• symfony/yaml: ^7.0|^8.0

Suggests

• spomky-labs/aes-key-wrap: To enable AES Key Wrap algorithm.
• symfony/serializer: Use the Symfony serializer to serialize/unserialize JWS and JWE tokens.
• symfony/var-dumper: Used to show data on the debug toolbar.

Conflicts

• spomky-labs/jose: *

Replaces

• web-token/jwt-bundle: 4.2.7
• web-token/jwt-experimental: 4.2.7
• web-token/jwt-library: 4.2.7

MIT

• Florent Morselli
• All contributors

• symfony
• bundle
• jwt
• JWS
• JWE
• JOSE
• jwa
• JWK
• JWKSet
• Jot
• RFC7515
• RFC7516
• RFC7517
• RFC7518
• RFC7519
• RFC7520

Published on Packagist.org on 2026-11-08 15:13 UTC

README

JSON Web Tokens: JWS, JWE and JWK.

Documentation

The official documentation is at https://docs.spomky-labs.com/jwt/, one version per maintained branch.

• Pre-requisite
• The framework — which package does what.
• Security recommendations — read before you trust a token.
• From v4.2 to v4.3

Support

I bring solutions to your problems and answer your questions.

If you really love that project, and the work I have done or if you want I prioritize your issues, then you can help me out for a couple of 🍻 or more!

Become a sponsor

Or

Contributing

Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices.

If you discover a security vulnerability within the project, please don't use the bug tracker and don't publish it publicly. Instead, all security issues must be sent to security [at] spomky-labs.com.

Licence

This software is release under MIT licence.