web-token/jwt-framework

JSON Object Signing and Encryption library for PHP and Symfony Bundle.

4.0.6 2025-08-13 20:11 UTC

Requires

• php: >=8.2
• ext-openssl: *
• brick/math: ^0.12|^0.13
• psr/clock: ^1.0
• psr/event-dispatcher: ^1.0
• spomky-labs/pki-framework: ^1.2.1
• symfony/config: ^7.0
• symfony/console: ^7.0
• symfony/dependency-injection: ^7.0
• symfony/event-dispatcher: ^7.0
• symfony/http-client-contracts: ^3.4
• symfony/http-kernel: ^7.0

Requires (Dev)

• ext-curl: *
• ext-gmp: *
• ext-sodium: *
• deptrac/deptrac: ^2.0
• ekino/phpstan-banned-code: ^2.0|^3.0
• ergebnis/phpunit-slow-test-detector: ^2.14
• infection/infection: ^0.29
• matthiasnoback/symfony-config-test: ^6.0
• paragonie/sodium_compat: ^1.20|^2.0
• php-parallel-lint/php-parallel-lint: ^1.3
• phpbench/phpbench: ^1.2
• phpstan/extension-installer: ^1.3|^2.0
• phpstan/phpstan: ^1.8|^2.0
• phpstan/phpstan-deprecation-rules: ^1.0|^2.0
• phpstan/phpstan-doctrine: ^1.3|^2.0
• phpstan/phpstan-phpunit: ^1.1|^2.0
• phpstan/phpstan-strict-rules: ^1.4|^2.0
• phpstan/phpstan-symfony: ^1.3|^2.0
• phpunit/phpunit: ^10.5.10|^11.0|^12.0
• rector/rector: ^1.0|^2.0
• roave/security-advisories: dev-latest
• spomky-labs/aes-key-wrap: ^7.0
• staabm/phpstan-dba: ^0.2.79|^0.3
• staabm/phpstan-todo-by: ^0.1.25|^0.2
• struggle-for-php/sfp-phpstan-psr-log: ^0.20|^0.21|^0.22|^0.23|^0.24
• symfony/browser-kit: ^7.0
• symfony/clock: ^7.0
• symfony/finder: ^7.0
• symfony/framework-bundle: ^7.0
• symfony/http-client: ^7.0
• symfony/serializer: ^7.0
• symfony/var-dumper: ^7.0
• symfony/yaml: ^7.0
• symplify/easy-coding-standard: ^12.0

Suggests

• spomky-labs/aes-key-wrap: To enable AES Key Wrap algorithm.
• symfony/serializer: Use the Symfony serializer to serialize/unserialize JWS and JWE tokens.
• symfony/var-dumper: Used to show data on the debug toolbar.

Conflicts

• spomky-labs/jose: *

Replaces

• web-token/jwt-bundle: 4.0.6
• web-token/jwt-experimental: 4.0.6
• web-token/jwt-library: 4.0.6

MIT

• Florent Morselli
• All contributors

• symfony
• bundle
• jwt
• JWS
• JWE
• JOSE
• jwa
• JWK
• JWKSet
• Jot
• RFC7515
• RFC7516
• RFC7517
• RFC7518
• RFC7519
• RFC7520

README

Documentation

The official documentation is available as https://web-token.spomky-labs.com/

Support

I bring solutions to your problems and answer your questions.

If you really love that project, and the work I have done or if you want I prioritize your issues, then you can help me out for a couple of 🍻 or more!

Become a sponsor

Or

Contributing

Requests for new features, bug fixed and all other ideas to make this library useful are welcome. Please follow these best practices.

If you discover a security vulnerability within the project, please don't use the bug tracker and don't publish it publicly. Instead, all security issues must be sent to security [at] spomky-labs.com.

Licence

This software is release under MIT licence.