f21/jwt

This package is abandoned and no longer maintained. The author suggests using the lcobucci/jwt package instead.

JWT (JSON Web Tokens) for PHP

Maintainers

Details

github.com/F21/jwt

Homepage

Source

Issues

Installs: 9 089

Dependents: 1

Suggesters: 0

Security: 0

Stars: 32

Watchers: 5

Forks: 13

Open Issues: 0

2.0 2015-05-01 12:21 UTC

Requires

  • php: >=5.4.8

MIT a327cf9052df8f9f97728ca0b5fa78a8231b79b6

  • Francis Chuang <francis.chuang.woop@gmail.com>

jwtjson web tokens

This package is not auto-updated.

Last update: 2022-02-01 12:23:11 UTC

README

A PHP library for encoding and decoding JSON Web Tokens.

Deprecration Notice

This project is no longer being actively maintained. Please consider switching to lcobucci/jwt or one of the PHP libraries listed on jwt.io.

Important security notice

Thanks to Toshiharu Sugiyama!

Please upgrade to 2.0 as soon as possible as previous versions are susceptible to verification bypass attacks if the same public key is used for signing when using asymmetric and symmetric algorithms.

This is a release breaks backwards compatibility because you now need to pass in the decoding algorithm when decoding in order to verify the JWT.

For more information see: JVN#06120222 at jpcert.or.jp

Supported Algorithms

HMAC

  • HS256 - HMAC using SHA-256 hash algorithm (default)
  • HS384 - HMAC using SHA-384 hash algorithm
  • HS512 - HMAC using SHA-512 hash algorithm

RSA (Public Key/Private Key pair)

  • RS256 - RSA using SHA-256 hash algorithm
  • RS384 - RSA using SHA-384 hash algorithm
  • RS512 - RSA using SHA-512 hash algorithm