|
Skip to content
|
Intern |
doFollow |
|
Sign in
|
Intern |
doFollow |
|
Search syntax tips
|
Extern |
doFollow |
|
Sign up
|
Intern |
doFollow |
|
jwtk
|
Intern |
doFollow |
|
jjwt
|
Intern |
doFollow |
|
.github
|
Intern |
doFollow |
|
api
|
Intern |
doFollow |
|
bom
|
Intern |
doFollow |
|
extensions
|
Intern |
doFollow |
|
impl
|
Intern |
doFollow |
|
tdjar
|
Intern |
doFollow |
|
.gitignore
|
Intern |
doFollow |
|
CHANGELOG.md
|
Intern |
doFollow |
|
LICENSE
|
Intern |
doFollow |
|
NOTICE.md
|
Intern |
doFollow |
|
README.adoc
|
Intern |
doFollow |
|
SECURITY.md
|
Intern |
doFollow |
|
mvnw
|
Intern |
doFollow |
|
mvnw.cmd
|
Intern |
doFollow |
|
pom.xml
|
Intern |
doFollow |
|
JOSE Working Group
|
Extern |
noFollow |
|
RFC 7519: JSON Web Token (JWT)
|
Extern |
noFollow |
|
RFC 7515: JSON Web Signature (JWS)
|
Extern |
noFollow |
|
RFC 7516: JSON Web Encryption (JWE)
|
Extern |
noFollow |
|
RFC 7517: JSON Web Key (JWK)
|
Extern |
noFollow |
|
RFC 7518: JSON Web Algorithms (JWA)
|
Extern |
noFollow |
|
RFC 7638: JSON Web Key Thumbprint
|
Extern |
noFollow |
|
RFC 9278: JSON Web Key Thumbprint URI
|
Extern |
noFollow |
|
RFC 7797: JWS Unencoded Payload Option
|
Extern |
noFollow |
|
RFC 8037: Edwards Curve algorithms and JWKs
|
Extern |
noFollow |
|
Les Hazlewood
|
Extern |
doFollow |
|
community
|
Extern |
doFollow |
|
Apache 2.0 License
|
Extern |
noFollow |
|
Features
|
Intern |
doFollow |
|
Currently Unsupported Features
|
Intern |
doFollow |
|
Community
|
Intern |
doFollow |
|
Getting Help
|
Intern |
doFollow |
|
Questions
|
Intern |
doFollow |
|
Bugs, Feature Requests, Ideas and General Discussions
|
Intern |
doFollow |
|
Contributing
|
Intern |
doFollow |
|
Pull Requests
|
Intern |
doFollow |
|
Help Wanted
|
Intern |
doFollow |
|
What is a JSON Web Token?
|
Intern |
doFollow |
|
JWT Example
|
Intern |
doFollow |
|
JWS Example
|
Intern |
doFollow |
|
JWE Example
|
Intern |
doFollow |
|
Installation
|
Intern |
doFollow |
|
JDK Projects
|
Intern |
doFollow |
|
Maven
|
Intern |
doFollow |
|
Gradle
|
Intern |
doFollow |
|
Android Projects
|
Intern |
doFollow |
|
Dependencies
|
Intern |
doFollow |
|
Proguard
|
Intern |
doFollow |
|
Bouncy Castle
|
Intern |
doFollow |
|
Understanding JJWT Dependencies
|
Intern |
doFollow |
|
Quickstart
|
Intern |
doFollow |
|
Creating a JWT
|
Intern |
doFollow |
|
JWT Header
|
Intern |
doFollow |
|
JwtBuilder Header
|
Intern |
doFollow |
|
Custom Header Parameters
|
Intern |
doFollow |
|
Header Parameter Map
|
Intern |
doFollow |
|
Jwts HeaderBuilder
|
Intern |
doFollow |
|
JWT Payload
|
Intern |
doFollow |
|
Arbitrary Content
|
Intern |
doFollow |
|
JWT Claims
|
Intern |
doFollow |
|
Standard Claims
|
Intern |
doFollow |
|
Custom Claims
|
Intern |
doFollow |
|
Claims Map
|
Intern |
doFollow |
|
JWT Compression
|
Intern |
doFollow |
|
Reading a JWT
|
Intern |
doFollow |
|
Constant Parsing Key
|
Intern |
doFollow |
|
Multiple Keys?
|
Intern |
doFollow |
|
Dynamic Key Lookup
|
Intern |
doFollow |
|
Key Locator
|
Intern |
doFollow |
|
Key Locator Strategy
|
Intern |
doFollow |
|
Key Locator Return Values
|
Intern |
doFollow |
|
Provider-constrained Keys
|
Intern |
doFollow |
|
Claim Assertions
|
Intern |
doFollow |
|
Accounting for Clock Skew
|
Intern |
doFollow |
|
Custom Clock Support
|
Intern |
doFollow |
|
JWT Decompression
|
Intern |
doFollow |
|
Signed JWTs
|
Intern |
doFollow |
|
Standard Signature Algorithms
|
Intern |
doFollow |
|
Signature Algorithms Keys
|
Intern |
doFollow |
|
HMAC-SHA
|
Intern |
doFollow |
|
RSA
|
Intern |
doFollow |
|
Elliptic Curve
|
Intern |
doFollow |
|
Edwards Curve
|
Intern |
doFollow |
|
Creating Safe Keys
|
Intern |
doFollow |
|
Secret Keys
|
Intern |
doFollow |
|
Asymmetric Keys
|
Intern |
doFollow |
|
Creating a JWS
|
Intern |
doFollow |
|
Signing Key
|
Intern |
doFollow |
|
SecretKey Formats
|
Intern |
doFollow |
|
SignatureAlgorithm Override
|
Intern |
doFollow |
|
JWS Compression
|
Intern |
doFollow |
|
Reading a JWS
|
Intern |
doFollow |
|
Verification Key
|
Intern |
doFollow |
|
Verification Key Locator
|
Intern |
doFollow |
|
JWS Decompression
|
Intern |
doFollow |
|
Unencoded Payload Option
|
Intern |
doFollow |
|
Benefits
|
Intern |
doFollow |
|
Disadvantages
|
Intern |
doFollow |
|
Detached Payload Example
|
Intern |
doFollow |
|
Non-Detached Payload Example
|
Intern |
doFollow |
|
Encrypted JWTs
|
Intern |
doFollow |
|
JWE Encryption Algorithms
|
Intern |
doFollow |
|
Symmetric Ciphers
|
Intern |
doFollow |
|
JWE Key Management Algorithms
|
Intern |
doFollow |
|
JWE Standard Key Management Algorithms
|
Intern |
doFollow |
|
RSA Key Encryption
|
Intern |
doFollow |
|
AES Key Encryption
|
Intern |
doFollow |
|
Direct Key Encryption
|
Intern |
doFollow |
|
Password-Based Key Encryption
|
Intern |
doFollow |
|
Elliptic Curve Diffie-Hellman Ephemeral Static Key Agreement (ECDH-ES)
|
Intern |
doFollow |
|
Creating a JWE
|
Intern |
doFollow |
|
JWE Compression
|
Intern |
doFollow |
|
Reading a JWE
|
Intern |
doFollow |
|
Decryption Key
|
Intern |
doFollow |
|
Decryption Key Locator
|
Intern |
doFollow |
|
ECDH-ES Decryption with PKCS11 PrivateKeys
|
Intern |
doFollow |
|
JWE Decompression
|
Intern |
doFollow |
|
JSON Web Keys (JWKs)
|
Intern |
doFollow |
|
Create a JWK
|
Intern |
doFollow |
|
JWK from a Map
|
Intern |
doFollow |
|
Read a JWK
|
Intern |
doFollow |
|
PrivateKey JWKs
|
Intern |
doFollow |
|
Private JWK from KeyPair
|
Intern |
doFollow |
|
Private JWK Public Conversion
|
Intern |
doFollow |
|
JWK Thumbprints
|
Intern |
doFollow |
|
JWK Thumbprint as a Key ID
|
Intern |
doFollow |
|
JWK Thumbprint URI
|
Intern |
doFollow |
|
JWK Security Considerations
|
Intern |
doFollow |
|
JWK Sets
|
Intern |
doFollow |
|
Create a JWK Set
|
Intern |
doFollow |
|
Read a JWK Set
|
Intern |
doFollow |
|
Compression
|
Intern |
doFollow |
|
Custom Compression Algorithm
|
Intern |
doFollow |
|
JSON Support
|
Intern |
doFollow |
|
Custom JSON Processor
|
Intern |
doFollow |
|
Jackson JSON Processor
|
Intern |
doFollow |
|
Parsing of Custom Claim Types
|
Intern |
doFollow |
|
Gson JSON Processor
|
Intern |
doFollow |
|
Base64 Support
|
Intern |
doFollow |
|
Understanding Base64 in Security Contexts
|
Intern |
doFollow |
|
Base64 is not encryption
|
Intern |
doFollow |
|
Changing Base64 Characters
|
Intern |
doFollow |
|
Adding Invalid Characters
|
Intern |
doFollow |
|
Custom Base64
|
Intern |
doFollow |
|
Examples
|
Intern |
doFollow |
|
JWT Signed with HMAC
|
Intern |
doFollow |
|
JWT Signed with RSA
|
Intern |
doFollow |
|
JWT Signed with ECDSA
|
Intern |
doFollow |
|
JWT Signed with EdDSA
|
Intern |
doFollow |
|
JWT Encrypted Directly with a SecretKey
|
Intern |
doFollow |
|
JWT Encrypted with RSA
|
Intern |
doFollow |
|
JWT Encrypted with AES Key Wrap
|
Intern |
doFollow |
|
JWT Encrypted with ECDH-ES
|
Intern |
doFollow |
|
JWT Encrypted with a Password
|
Intern |
doFollow |
|
SecretKey JWK
|
Intern |
doFollow |
|
RSA Public JWK
|
Intern |
doFollow |
|
RSA Private JWK
|
Intern |
doFollow |
|
Elliptic Curve Public JWK
|
Intern |
doFollow |
|
Elliptic Curve Private JWK
|
Intern |
doFollow |
|
Edwards Elliptic Curve Public JWK
|
Intern |
doFollow |
|
Edwards Elliptic Curve Private JWK
|
Intern |
doFollow |
|
Learn More
|
Intern |
doFollow |
|
Author
|
Intern |
doFollow |
|
License
|
Intern |
doFollow |
|
fluent
|
Extern |
noFollow |
|
AES_128_CBC_HMAC_SHA_256
|
Extern |
noFollow |
|
AES_192_CBC_HMAC_SHA_384
|
Extern |
noFollow |
|
AES_256_CBC_HMAC_SHA_512
|
Extern |
noFollow |
|
Non-compact
|
Extern |
noFollow |
|
ask your question here
|
Extern |
doFollow |
|
discuss it here
|
Extern |
doFollow |
|
Help Wanted Issues
|
Extern |
doFollow |
|
contributing pull requests
|
Intern |
doFollow |
|
Registered Claims
|
Extern |
noFollow |
|
Authenticated Encryption with Associated Data
|
Extern |
noFollow |
|
JDK project
|
Intern |
doFollow |
|
Android project
|
Intern |
doFollow |
|
Android Proguard
|
Extern |
noFollow |
|
dependencies
|
Intern |
doFollow |
|
content
|
Intern |
doFollow |
|
digitally signing
|
Intern |
doFollow |
|
encrypting
|
Intern |
doFollow |
|
recommended compact format
|
Extern |
noFollow |
|
standard claim name
|
Intern |
doFollow |
|
Configure the Provider in the JVM
|
Extern |
noFollow |
|
Security.addProvider(Provider)
|
Extern |
noFollow |
|
RFC 7518, Sections 3.2 through 3.5
|
Extern |
noFollow |
|
RFC 7512 Section 3.2
|
Extern |
noFollow |
|
3.3
|
Extern |
noFollow |
|
3.5
|
Extern |
noFollow |
|
RFC 7512 Section 3.4
|
Extern |
noFollow |
|
Base64-encoding is not encryption
|
Intern |
doFollow |
|
encoded byte array
|
Extern |
noFollow |
|
TLS does not guarantee end-to-end security
|
Extern |
noFollow |
|
MUST
|
Extern |
noFollow |
|
security considerations
|
Extern |
noFollow |
|
Authenticated Encryption
|
Extern |
noFollow |
|
encryption algorithm
|
Intern |
doFollow |
|
4.2
|
Extern |
noFollow |
|
4.3
|
Extern |
noFollow |
|
OWASP PBKDF2 recommended
|
Extern |
noFollow |
|
epk header
|
Extern |
noFollow |
|
NIST.800-56A
|
Extern |
noFollow |
|
PartyUInfo
|
Extern |
noFollow |
|
PartyVInfo
|
Extern |
noFollow |
|
header
|
Intern |
doFollow |
|
claims
|
Intern |
doFollow |
|
ECKey
|
Extern |
noFollow |
|
EdECKey
|
Extern |
noFollow |
|
SunPKCS11 Provider
|
Extern |
noFollow |
|
Provider-constrained Keys
|
Intern |
doFollow |
|
DEFLATE
|
Extern |
noFollow |
|
GZIP
|
Extern |
noFollow |
|
JSON Web Keys
|
Extern |
noFollow |
|
DER, PEM and PKCS12
|
Extern |
noFollow |
|
JSON deserializer
|
Intern |
doFollow |
|
RFC 7518, Section 6.1.1
|
Extern |
noFollow |
|
RFC 7518, Section 6.3.2
|
Extern |
noFollow |
|
IANA Named Information Hash Algorithm Registry
|
Extern |
noFollow |
|
RFC 7515, Appendix A.1.1
|
Extern |
noFollow |
|
JWK Set
|
Extern |
noFollow |
|
JWK
|
Intern |
doFollow |
|
described above
|
Intern |
doFollow |
|
Base64
|
Extern |
noFollow |
|
Base64
|
Extern |
noFollow |
|
Base64URL
|
Extern |
noFollow |
|
Changing Base64 characters
|
Intern |
doFollow |
|
answers
|
Extern |
noFollow |
|
JJWT issue comments
|
Extern |
doFollow |
|
good answer
|
Extern |
noFollow |
|
Robustness Principle
|
Extern |
noFollow |
|
JJWT Issue #518
|
Extern |
doFollow |
|
JWS Signed with HMAC
|
Intern |
doFollow |
|
JWS Signed with RSA
|
Intern |
doFollow |
|
JWS Signed with ECDSA
|
Intern |
doFollow |
|
JWS Signed with EdDSA
|
Intern |
doFollow |
|
JWE Encrypted Directly with a SecretKey
|
Intern |
doFollow |
|
JWE Encrypted with RSA
|
Intern |
doFollow |
|
JWE Encrypted with AES Key Wrap
|
Intern |
doFollow |
|
JWE Encrypted with ECDH-ES
|
Intern |
doFollow |
|
JWE Encrypted with a Password
|
Intern |
doFollow |
|
SecretKey JWK
|
Intern |
doFollow |
|
RSA Public JWK
|
Intern |
doFollow |
|
RSA Private JWK
|
Intern |
doFollow |
|
Elliptic Curve Public JWK
|
Intern |
doFollow |
|
Elliptic Curve Private JWK
|
Intern |
doFollow |
|
Edwards Elliptic Curve Public JWK
|
Intern |
doFollow |
|
Edwards Elliptic Curve Private JWK
|
Intern |
doFollow |
|
HMAC
|
Extern |
noFollow |
|
6 standard RSA signing algorithms
|
Intern |
doFollow |
|
RSA keys 2048-bits or larger
|
Intern |
doFollow |
|
Edwards Curve Digital Signature Algorithm
|
Extern |
noFollow |
|
RFC 8037, Section 3.1
|
Extern |
noFollow |
|
directly using a symmetric secret key
|
Intern |
doFollow |
|
RSA Key Encryption
|
Intern |
doFollow |
|
AES Key Encryption
|
Intern |
doFollow |
|
Elliptic Curve Diffie-Hellman Ephemeral Static Key Agreement
|
Intern |
doFollow |
|
Password-based Key Encryption
|
Intern |
doFollow |
|
JSON Web Token for Java and Android
|
Extern |
noFollow |
|
How to Create and Verify JWTs in Java
|
Extern |
noFollow |
|
Where to Store Your JWTs - Cookies vs HTML5 Web Storage
|
Extern |
noFollow |
|
Use JWT the Right Way!
|
Extern |
noFollow |
|
Token Authentication for Java Applications
|
Extern |
noFollow |
|
JJWT Changelog
|
Intern |
doFollow |
|
java
|
Intern |
doFollow |
|
json
|
Intern |
doFollow |
|
jwt
|
Intern |
doFollow |
|
jackson
|
Intern |
doFollow |
|
jwt-claims
|
Intern |
doFollow |
|
jwt-tokens
|
Intern |
doFollow |
|
jwt-token
|
Intern |
doFollow |
|
jwk
|
Intern |
doFollow |
|
jwe
|
Intern |
doFollow |
|
jws
|
Intern |
doFollow |
|
jwt-bearer-tokens
|
Intern |
doFollow |
|
jwt-authentication
|
Intern |
doFollow |
|
jwt-server
|
Intern |
doFollow |
|
jwt-auth
|
Intern |
doFollow |
|
hacktoberfest
|
Intern |
doFollow |
|
jwkset
|
Intern |
doFollow |
|
java-jwt
|
Intern |
doFollow |
|
jjwt
|
Intern |
doFollow |
|
jwk-thumbprint
|
Intern |
doFollow |
|
jwk-thumbprint-uri
|
Intern |
doFollow |
|
Report repository
|
Intern |
doFollow |
|
+ 8 releases
|
Intern |
doFollow |
|
+ 51 contributors
|
Intern |
doFollow |
|
Terms
|
Extern |
doFollow |
|
Privacy
|
Extern |
doFollow |
|
Security
|
Extern |
doFollow |
|
Status
|
Extern |
doFollow |
|
Community
|
Extern |
doFollow |
|
Docs
|
Extern |
doFollow |
|
Contact
|
Extern |
doFollow |