jwtk/jjwt

Features

• JSON Web Tokens - Provides a comprehensive framework for creating, parsing, and validating JSON Web Tokens.
• Signed JWT Generation - Produces compact signed objects by applying a secret or private key to the token payload.
• Encrypted JWT Generation - Produces compact encrypted objects by applying authenticated encryption algorithms and keys to token payloads.
• Cryptographic Key Generation - Provides utilities to produce secure keys and pairs that meet the requirements of selected signature algorithms.
• JWK Set Organization - Enables grouping multiple cryptographic keys into a single object for efficient token key distribution.
• Key Encoding Standards - Enables representing secret and public keys as JSON objects following standard specifications.
• Java JWT Libraries - Provides a comprehensive Java and Android library for creating, parsing, and validating JSON Web Tokens.
• JSON Web Key Imports - Provides a system for serializing, deserializing, and managing sets of JSON Web Keys for distribution.
• Key Resolution - Implements the process of selecting the correct public key from a set using identifiers found in token headers.
• JWT Authentication - Integrates JWT creation and verification into Java and Android applications for secure session and identity management.
• JWT Parsing - Decodes compact token strings and validates signatures or decrypts content to retrieve the payload.
• JWT Claim Validation - Enforces specific requirements on parsed tokens, such as subject matching, to ensure the token is trusted.
• JWT Generation - Provides a general capability to create signed or encrypted tokens for securely transmitting claims.
• JWT Key Management - Manages the creation, rotation, and distribution of cryptographic keys using the JSON Web Key (JWK) standard.
• JSON Web - Implements a dedicated key manager for generating, encoding, and organizing JSON Web Keys and key sets.
• Token Encryption - Provides the ability to create encrypted JWTs (JWE) to ensure the confidentiality of token claims.
• Token Payload Compression - Applies compression codecs to token payloads to minimize the final compact token string length.
• JSON Serialization Libraries - Supports the integration of specific JSON serialization libraries for converting token claims.
• Custom Mapping Interfaces - Allows the use of external mapping libraries to serialize and deserialize data objects within token headers and claims.
• Pluggable Serialization - Offers a customizable mapping interface to delegate JSON serialization of token claims to external libraries.
• API Access Control - Validates token claims and signatures to enforce authorization policies for protected API resources.
• Authenticated Encryption - Wraps authenticated encryption algorithms to ensure payload confidentiality across different security modules.
• Canonical Key Thumbprinting - Implements deterministic hashing of public key properties to create unique key thumbprints.
• Cryptographic Provider Interfaces - Provides interfaces that allow users to plug in custom cryptographic algorithms and security providers.
• Cryptographic Toolkits - Provides a comprehensive toolkit for implementing signature algorithms, payload compression, and claim validation for web tokens.
• Custom Signature Algorithms - Allows the addition of new cryptographic signature algorithms via standard security provider interfaces.
• Algorithm-Driven Key Generation - Provides utilities to generate cryptographic keys and pairs tailored to the requirements of specific signature algorithms.
• Secure Token Exchange - Generates signed or encrypted payloads to transmit trusted data between different services.
• Utility and Integration Libraries - Library for creating and verifying JSON Web Tokens.
• Security and Cryptography - JSON Web Token implementation for Java and Android.

Star history