A complete PHP implementation of the JOSE specifications: signing, encrypting, and carrying claims between systems that do not trust each other by default.
What it covers
- JWS, JSON Web Signature: prove that a payload has not been altered and comes from who it claims.
- JWE, JSON Web Encryption: hide the payload from everyone but its recipient.
- JWK and JWKSet, JSON Web Key: create, load, rotate and publish the keys the rest depends on.
- JWT, JSON Web Token: the claims themselves, checked against your own rules.
- Nested tokens, signed then encrypted, for when one is not enough.
Getting started
composer require web-token/jwt-frameworkThe framework is modular: install the whole thing, or only the components you need. A Symfony bundle wires the services for you, with configuration rather than glue code.
Where to look next
The documentation walks through each component with working examples. The source lives on GitHub, under the MIT licence.