web-token/jwt-framework

JSON Object Signing and Encryption library for PHP and Symfony Bundle.

3.1.7 2023-03-11 14:35 UTC

Requires

• php: >=8.1
• ext-json: *
• ext-mbstring: *
• ext-openssl: *
• ext-sodium: *
• brick/math: ^0.9|^0.10|^0.11
• paragonie/constant_time_encoding: ^2.4
• psr/event-dispatcher: ^1.0
• psr/http-client: ^1.0
• psr/http-factory: ^1.0
• spomky-labs/aes-key-wrap: ^7.0
• spomky-labs/pki-framework: ^1.0
• symfony/config: ^5.4|^6.0
• symfony/console: ^5.4|^6.0
• symfony/dependency-injection: ^5.4|^6.0
• symfony/event-dispatcher: ^5.4|^6.0
• symfony/http-kernel: ^5.4|^6.0
• symfony/polyfill-mbstring: ^1.12

Requires (Dev)

• ext-curl: *
• ext-gmp: *
• bjeavons/zxcvbn-php: ^1.3
• blackfire/php-sdk: ^1.31
• ekino/phpstan-banned-code: ^1.0
• infection/infection: ^0.26
• matthiasnoback/symfony-config-test: ^4.3.0
• nyholm/psr7: ^1.5
• php-http/mock-client: ^1.5
• php-parallel-lint/php-parallel-lint: ^1.3
• phpbench/phpbench: ^1.2
• phpstan/extension-installer: ^1.1
• phpstan/phpstan: ^1.8
• phpstan/phpstan-deprecation-rules: ^1.0
• phpstan/phpstan-phpunit: ^1.1
• phpstan/phpstan-strict-rules: ^1.4
• phpunit/phpunit: ^9.5.23
• qossmic/deptrac-shim: ^1.0
• rector/rector: ^0.14
• roave/security-advisories: dev-latest
• symfony/browser-kit: ^6.1.3
• symfony/finder: ^5.4|^6.0
• symfony/framework-bundle: ^6.1.3
• symfony/http-client: ^5.4|^6.0
• symfony/phpunit-bridge: ^6.1.3
• symfony/serializer: ^6.1.3
• symfony/var-dumper: ^6.1.3
• symfony/yaml: ^6.1.3
• symplify/easy-coding-standard: ^11.0

Suggests

• ext-sodium: Sodium is required for OKP key creation, EdDSA signature algorithm and ECDH-ES key encryption with OKP keys
• bjeavons/zxcvbn-php: Adds key quality check for oct keys.
• php-http/httplug: To enable JKU/X5U support.
• php-http/httplug-bundle: To enable JKU/X5U support.
• php-http/message-factory: To enable JKU/X5U support.
• symfony/serializer: Use the Symfony serializer to serialize/unserialize JWS and JWE tokens.
• symfony/var-dumper: Used to show data on the debug toolbar.

Conflicts

• spomky-labs/jose: *

Replaces

• web-token/encryption-pack: 3.1.7
• web-token/jwt-bundle: 3.1.7
• web-token/jwt-checker: 3.1.7
• web-token/jwt-console: 3.1.7
• web-token/jwt-core: 3.1.7
• web-token/jwt-encryption: 3.1.7
• web-token/jwt-encryption-algorithm-aescbc: 3.1.7
• web-token/jwt-encryption-algorithm-aesgcm: 3.1.7
• web-token/jwt-encryption-algorithm-aesgcmkw: 3.1.7
• web-token/jwt-encryption-algorithm-aeskw: 3.1.7
• web-token/jwt-encryption-algorithm-dir: 3.1.7
• web-token/jwt-encryption-algorithm-ecdh-es: 3.1.7
• web-token/jwt-encryption-algorithm-experimental: 3.1.7
• web-token/jwt-encryption-algorithm-pbes2: 3.1.7
• web-token/jwt-encryption-algorithm-rsa: 3.1.7
• web-token/jwt-key-mgmt: 3.1.7
• web-token/jwt-nested-token: 3.1.7
• web-token/jwt-signature: 3.1.7
• web-token/jwt-signature-algorithm-ecdsa: 3.1.7
• web-token/jwt-signature-algorithm-eddsa: 3.1.7
• web-token/jwt-signature-algorithm-experimental: 3.1.7
• web-token/jwt-signature-algorithm-hmac: 3.1.7
• web-token/jwt-signature-algorithm-none: 3.1.7
• web-token/jwt-signature-algorithm-rsa: 3.1.7
• web-token/jwt-util-ecc: 3.1.7
• web-token/signature-pack: 3.1.7

MIT

• Florent Morselli
• All contributors

• symfony
• bundle
• jwt
• JWS
• JWE
• JOSE
• jwa
• JWK
• JWKSet
• Jot
• RFC7515
• RFC7516
• RFC7517
• RFC7518
• RFC7519
• RFC7520

README

Documentation

The official documentation is available as https://web-token.spomky-labs.com/

Support

I bring solutions to your problems and answer your questions.

If you really love that project, and the work I have done or if you want I prioritize your issues, then you can help me out for a couple of 🍻 or more!

Become a sponsor

Or

Contributing

Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices.

If you discover a security vulnerability within the project, please don't use the bug tracker and don't publish it publicly. Instead, all security issues must be sent to security [at] spomky-labs.com.

Licence

This software is release under MIT licence.