Jose

jose is a cryptography library for signing, encrypting, and verifying tokens and messages using the JSON Object Signing and Encryption standards. It provides a toolkit for the implementation of JSON Web Tokens, JSON Web Signatures, and JSON Web Encryption.

The library serves as a high-level interface for the Web Crypto API, allowing for the generation, import, and export of symmetric secrets and asymmetric key pairs. It handles the encryption and decryption of web messages and the validation of digital signatures to ensure data integrity and identity.

Its capabilities cover cryptographic key management, stateless token validation, and the encoding of JSON objects into compact, URL-safe serialization formats. It processes various JSON syntaxes to support industry specifications for secure data exchange.

Features

JSON Web Tokens - Provides a full implementation of the JSON Web Token (JWT) standard for identity and resource security.
Cryptographic Key Management - Provides utilities for generating, importing, and exporting symmetric and asymmetric cryptographic keys.
Key Encoding Standards - Implements the JSON Web Key (JWK) standard for representing cryptographic keys in a portable format.
JSON Web Encryption - Implements the JWE standard to ensure privacy and confidentiality of web messages.
JSON Web Signatures - Implements the JWS standard for creating and validating digital signatures on JSON payloads.
Web Crypto API Integrations - Utilizes the native Web Crypto API for secure, hardware-backed cryptographic operations in Node.js and browsers.
Stateless Token Validation - Provides local verification of digital signatures to validate tokens without server-side session state.
Cryptography Libraries - Acts as a specialized cryptography library for signing and encrypting JSON-based tokens.
Compact Serialization - Provides the specialized encoding required for transporting JSON tokens in HTTP headers.
Authentication & Authorization - Zero-dependency library for JWT, JWS, and JWE.

Star history

panvajose

Name: panva/jose
Author: panva

View on GitHub

7,346 stars362 forksTypeScriptmit6 views

Jose

Features

JSON Web Tokens - Provides a full implementation of the JSON Web Token (JWT) standard for identity and resource security.
Cryptographic Key Management - Provides utilities for generating, importing, and exporting symmetric and asymmetric cryptographic keys.
Key Encoding Standards - Implements the JSON Web Key (JWK) standard for representing cryptographic keys in a portable format.
JSON Web Encryption - Implements the JWE standard to ensure privacy and confidentiality of web messages.
JSON Web Signatures - Implements the JWS standard for creating and validating digital signatures on JSON payloads.
Web Crypto API Integrations - Utilizes the native Web Crypto API for secure, hardware-backed cryptographic operations in Node.js and browsers.
Stateless Token Validation - Provides local verification of digital signatures to validate tokens without server-side session state.
Cryptography Libraries - Acts as a specialized cryptography library for signing and encrypting JSON-based tokens.
Compact Serialization - Provides the specialized encoding required for transporting JSON tokens in HTTP headers.
Authentication & Authorization - Zero-dependency library for JWT, JWS, and JWE.

Open-source alternatives to Jose

Similar open-source projects, ranked by how many features they share with Jose.

lcobucci/jwt
lcobucci/jwt
7,481View on GitHub
This is a PHP library for generating, parsing, and validating JSON Web Tokens and JSON Web Signatures. It serves as a cryptographic claim handler and token validation engine used to securely exchange identity information between services. The project provides an implementation of the JSON Web Signature standard to create signed digital tokens. It allows for the encoding of identity claims and the application of cryptographic signatures to ensure data transmission remains secure. The library covers the full lifecycle of token management, including the creation of signed tokens, decoding of to
PHP
View on GitHub7,481
lepture/authlib
lepture/authlib
5,346View on GitHub
Authlib is a comprehensive Python framework for implementing OAuth 1.0, OAuth 2.0, and OpenID Connect clients and servers. It provides a complete toolkit for identity management, spanning the development of authorization servers, resource servers, and client-side integrations. The library distinguishes itself through a full implementation of the JOSE specifications, including JSON Web Tokens, Encryption, Signatures, and Keys. It features specialized capabilities for non-interactive authentication via service account assertion frameworks and a compliance-correction layer designed to handle ide
Python
View on GitHub5,346
smallstep/cli
smallstep/cli
4,255View on GitHub
This project is a command-line tool for managing public key infrastructure and digital identities. It provides a comprehensive suite for X.509 certificate lifecycle management, including the generation, signing, renewal, and revocation of certificates and signing requests. The tool distinguishes itself through specialized security capabilities such as binding cryptographic credentials to TPMs and HSMs for hardware-backed identity attestation. It also provides dedicated support for machine identity security, using short-lived SSH certificates and mTLS to secure non-human workloads. Broad capa
Gocertificatecryptographyencryption
View on GitHub4,255
denji/golang-tls
denji/golang-tls
1,329View on GitHub
This project provides a collection of practical implementations and code references for establishing secure network communications using transport layer security protocols. It serves as a guide for developers to implement public key infrastructure and enforce encryption standards within client and server applications. The repository focuses on cryptographic certificate management, including the generation of public and private key pairs and the creation of self-signed certificates for local testing environments. It covers the configuration of secure web servers, offering methods to harden ser
awesomegogolang
View on GitHub1,329

See all 30 alternatives to Jose

Frequently asked questions

What does panva/jose do?

What are the main features of panva/jose?

The main features of panva/jose are: JSON Web Tokens, Cryptographic Key Management, Key Encoding Standards, JSON Web Encryption, JSON Web Signatures, Web Crypto API Integrations, Stateless Token Validation, Cryptography Libraries.

What are some open-source alternatives to panva/jose?

Open-source alternatives to panva/jose include: lcobucci/jwt — This is a PHP library for generating, parsing, and validating JSON Web Tokens and JSON Web Signatures. It serves as a… lepture/authlib — Authlib is a comprehensive Python framework for implementing OAuth 1.0, OAuth 2.0, and OpenID Connect clients and… smallstep/cli — This project is a command-line tool for managing public key infrastructure and digital identities. It provides a… denji/golang-tls — This project provides a collection of practical implementations and code references for establishing secure network… authlib/authlib — Authlib is a comprehensive Python library for building and integrating OAuth 1.0, OAuth 2.0, and OpenID Connect… google/tink — Tink is a multi-language cryptography library and security toolkit providing secure APIs for data encryption and…