public/libjwt: The C JSON Web Token Library +JWK +JWKS

The C JSON Web Token Library +JWK +JWKS

json jwk jwk-to-pem jwks jwkset jwt jwt-auth jwt-authentication jwt-authorization jwt-token pem-to-jwk

Find a file

Ben Collins 3b735a8d49 openssl: fix leak on ec_sig path openssl_verify_sha_pem() was allocating a new buffer when doing ec_sig and was not freeing it. Signed-off-by: Ben Collins <bcollins@libjwt.io>		2025-03-04 10:22:07 +00:00
.github/workflows	workflow: Install bats for test builds	2025-02-14 06:51:33 -05:00
cmake	v3.2.0	2025-02-13 22:19:20 -05:00
doxygen	Update docs descriptions	2025-02-11 13:52:32 -05:00
images	build: Rework some things for autoconf and cmake builds	2024-12-23 09:24:23 -05:00
include	jwks_load_fromurl: Correct usage of SSL verify in libcurl	2025-02-14 07:24:54 -05:00
libjwt	openssl: fix leak on ec_sig path	2025-03-04 10:22:07 +00:00
tests	tests: Fix some memory leaks in the testing	2025-03-04 10:20:59 +00:00
tools	win32: Compile working	2025-02-13 08:06:42 -05:00
.gitignore	Reorg documents so latest devel if root and stable is in a subfolder	2025-01-09 08:04:53 -05:00
CMakeLists.txt	memcheck: Force valgrind to follow exec*()	2025-03-04 10:19:38 +00:00
LICENSE	Update LICENSE	2023-09-26 10:37:20 -04:00
README.md	Update docs descriptions	2025-02-11 13:52:32 -05:00

README.md

Warning

Version 3 of LibJWT is a complete overhaul of the code. Please see documentation for usage.

💡 Supported Standards

Standard	RFC	Description
`JWS`	📄 RFC-7515	JSON Web Signature
`JWE`	📄 RFC-7516	JSON Web Encryption
`JWK`	📄 RFC-7517	JSON Web Keys and Sets
`JWA`	📄 RFC-7518	JSON Web Algorithms
`JWT`	📄 RFC-7519	JSON Web Token

Note

Throughout this documentation you will see links such as the ones above to RFC documents. These are relevant to that particular part of the library and are helpful to understand some of the specific standards that shaped the development of LibJWT.

🚧 Build Prerequisites

Required

JANSSON (>= 2.0)
CMake (>= 3.7)

Crypto support

OpenSSL (>= 3.0.0)
GnuTLS (>= 3.6.0)
MbedTLS (>= 3.6.0)

Note

OpenSSL is required and used for JWK(S) operations.

Algorithm support matrix

JWS Algorithm `alg`	OpenSSL	GnuTLS	MbedTLS
`HS256` `HS384` `HS512`	✅	✅	✅
`ES256` `ES384` `ES512`	✅	✅	✅
`RS256` `RS384` `RS512`	✅	✅	✅
`EdDSA` using `ED25519`	✅	✅	❌
`EdDSA` using `ED448`	✅	✅ `>= 3.8.8`	❌
`PS256` `PS384` `PS512`	✅	✅	✅`*`
`ES256K`	✅	❌	✅

* RSASSA-PSS support in MbedTLS depends on Mbed-TLS/TF-PSA-Crypto#154

Optional

Check Library (>= 0.9.10) for unit testing
Doxygen (>= 1.13.0) for documentation

📚 Docs and Source

🔗 Current Docs

🔗 Legacy Docs v2.1.1

🔗 GitHub Repo

📦 Pre-built Packages

LibJWT is available in most Linux distributions as well as through Homebrew for Linux, macOS, and Windows.

🔨 Build Instructions

With CMake:

$ mkdir build
$ cd build
$ cmake ..
$ make