JWSETKit

0.11.0

Star
A kit to create, sign and verify a JWT or JWS object
jsonwebtoken jws jwt json-web-key jwk swift server-side-swift json-web-algorithms json-web-encryption json-web-token jwa jwe
amosavian/JWSETKit

What's New

JWSETKit 0.11.0

2023-11-19T08:51:36Z
  • fix: RSA-PKCS1.5 on Linux
  • fix: Certificate.PublicKey RSA parsing
  • refactor: AES-CBC use CommonCrypto instead of CryptoExtras
  • rafactor: Minor optimization on DataProtocol usage and conversion
  • chore: Formatting improving and removing force unwraps
  • chore: SecKey initializer from DER (PKCS1, PKCS8 for RSA and X963 for EC)
  • chore: Rename rawRepresntation to externalRepresentation
  • build: BoringSSL is now only built when CommonCrypto is unavailable
  • chore: Fixed sonar errors

JWSETKit

A library for working with JSON Web Signature (JWS) and JSON Web Token (JWT).

Swift CodeQL License Release version

Overview

JSON Web Signature (JWS) represents content secured with digital signatures or Message Authentication Codes (MACs) using JSON-based RFC7159 data structures. The JWS cryptographic mechanisms provide integrity protection for an arbitrary sequence of octets.

JSON Web Token (JWT) is a compact claims representation format intended for space constrained environments such as HTTP Authorization headers and URI query parameters.

This module makes it possible to serialize, deserialize, create, and verify JWS/JWT messages.

Supported Swift Versions

This library was introduced with support for Swift 5.8 or later.

Getting Started

To use JWSETKit, add the following dependency to your Package.swift:

dependencies: [
    .package(url: "https://github.com/amosavian/JWSETKit", .upToNextMinor(from: "0.8.0"))
]

Note that this repository does not have a 1.0 tag yet, so the API is not stable.

You can then add the specific product dependency to your target:

dependencies: [
    .product(name: "JWSETKit", package: "JWSETKit"),
]

Usage

For detailed usage and API documentation, check the documentation.

Comparison To Other Libraries

Features

JWSETKit jwt-kit JOSESwift Auth0's JWTDecode
JSON Web Signature (JWS) ✅ ❌ ✅ ❌
JWS Multiple Signatures ✅ ❌ ❌ ❌
JWS Unencoded/Detached Payload ✅ ❌ ❌ ❌
JSON Web Token (JWT) ✅ ✅ ✅ ✅
JWT Signature Verfication ✅ ✅ ✅ ❌
JWT Expire/NotBefore Validity ✅ ✅ ✅ ❌
JSON Web Encryption (JWE) ✅ ❌ ✅ ❌
Support CommonCrypto Keys ✅ ❌ ❌ ❌
Support CryptoKit Keys ✅ ❌ ❌ ❌

Supported Algorithms

Signature/HMAC

JWSETKit jwt-kit JOSESwift Auth0's JWTDecode
HS256 ✅ ✅ ✅ ❌
HS384 ✅ ✅ ✅ ❌
HS512 ✅ ✅ ✅ ❌
RS256 ✅ ✅ ✅ ❌
RS384 ✅ ✅ ✅ ❌
RS512 ✅ ✅ ✅ ❌
ES256 ✅ ✅ ✅ ❌
ES384 ✅ ✅ ✅ ❌
ES512 ✅ ✅ ✅ ❌
PS256 ✅ ✅ ✅ ❌
PS384 ✅ ✅ ✅ ❌
PS512 ✅ ✅ ✅ ❌
PS512 ✅ ✅ ✅ ❌
EdDSA ✅ ✅ ✅ ❌

Key Encryption

JWSETKit JOSESwift
RSA1_5 ✅ ✅
RSA-OAEP ✅ ✅
RSA-OAEP-256 ✅ ✅
A128KW ✅ ✅
A192KW ✅ ✅
A256KW ✅ ✅
dir ✅ ✅
ECDH-ES ❌ ❌
ECDH-ES+A128KW ❌ ❌
ECDH-ES+A192KW ❌ ❌
ECDH-ES+A256KW ❌ ❌
A128GCMKW ✅ ❌
A192GCMKW ✅ ❌
A256GCMKW ✅ ❌
PBES2-HS256+A128KW ✅ ❌
PBES2-HS384+A192KW ✅ ❌
PBES2-HS512+A256KW ✅ ❌

Content Encryption

JWSETKit JOSESwift
A128CBC-HS256 ✅ ✅
A192CBC-HS384 ✅ ✅
A256CBC-HS512 ✅ ✅
A128GCM ✅ ❌
A192GCM ✅ ❌
A256GCM ✅ ❌

Description

  • Swift Tools 5.8.0
View More Packages from this Author

Dependencies

Last updated: Sun Dec 03 2023 08:33:33 GMT-1000 (Hawaii-Aleutian Standard Time)