dgrijalva/jwt-goArchived
Jwt Go
jwt-go is a Go library for creating, parsing, and verifying signed JSON Web Tokens. It provides a pluggable signing interface that supports multiple cryptographic algorithms, including HMAC, RSA, ECDSA, and RSA-PSS, allowing tokens to be signed and verified with different security properties.
The library is built around a signing-method registry and a token-parsing pipeline that splits a JWT string into its header, payload, and signature segments for validation. It includes typed error classification for common failure modes such as invalid signatures, expired tokens, or malformed input, and supports embedding standard JWT claims like issuer, subject, and expiration into a struct that can be serialized to JSON.
Developers can extend the library by implementing the signing interface and registering custom cryptographic algorithms, enabling support for additional signing methods beyond the built-in set. The library handles token creation, signing, and verification, providing a complete pipeline for generating tamper-evident tokens and validating their integrity against configured keys and algorithms.
Features
- JWT Signing and Verification - Creates and validates JSON Web Tokens with HMAC, RSA, ECDSA, or RSA-PSS cryptographic signatures.
- Go JWT Libraries - Provides a Go library for signing, verifying, and managing token payloads with HMAC, RSA, and ECDSA algorithms.
- Signed JWT Generation - Generates signed JSON Web Tokens using HMAC, RSA, RSA-PSS, or ECDSA algorithms.
- Go JWT Libraries - Provides a Go library for creating and validating signed JSON Web Tokens using multiple cryptographic signing methods.
- Python JWT Libraries - Provides a Go library for signing and verifying JSON Web Tokens with multiple cryptographic algorithms.
- Signing Interfaces - Implements a pluggable signing interface that allows any cryptographic algorithm to be registered and used for token creation and verification.
- JWT Parsing - Parses token strings and validates their signatures against known keys to ensure authenticity.
- Claim Struct Embeddings - Provides a struct for embedding standard JWT claims that can be serialized to JSON.
- Pluggable Cryptographic Backends - Allows adding new signing algorithms by implementing the signing interface and registering a factory method.
- Token Authentication - Handles token-based authentication by encoding and decoding JWT claims with signature verification.
- Token Signature Verification - Decodes token strings and validates their signatures against chosen cryptographic methods.
- Token Signing Operations - Signs structured JSON payloads with cryptographic algorithms to produce tamper-evident tokens.
- Typed Error Objects - Returns typed errors for common failure modes like invalid signature, expired token, or malformed input.
- Cryptographic Signing Methods - Extends JWT functionality by implementing and registering new cryptographic signing algorithms through a pluggable interface.
- Algorithm Registries - Registers cryptographic signing algorithms via a central map for name-to-implementation lookup.
- ECDSA JWT Signers - Implements elliptic curve digital signature algorithm for compact asymmetric signing of JSON Web Tokens.
- ECDSA Signing Implementations - Implements ECDSA for compact asymmetric signing of JSON Web Tokens.
- RSA JWT Signing Implementations - Ships an RSA signing implementation with PKCS1v15 and PSS padding for JWT token creation and verification.
- RSA Signing Implementations - Employs RSA with PKCS1v15 or PSS padding for asymmetric signing and verification.
- JWT Integrity Validations - Validates signed JSON Web Token signatures and integrity using configured signing methods and keys.
- Custom Algorithm Extensions - Adds new signing methods by implementing a provided interface and registering them with the library.
- HMAC JWT Signers - Uses HMAC-SHA256/384/512 for symmetric signing and verification of JSON Web Tokens.
- HMAC JWT Signers - Implements HMAC-SHA256/384/512 for symmetric signing and verification of JSON Web Tokens.
- JWT Parsing Pipelines - Provides a pipeline that splits JWT strings into header, payload, and signature segments for validation.
- Authentication and Authorization - Implementation of JSON Web Tokens.
- Security Libraries & Tokens - JSON Web Tokens implementation.
