spomky-labs/jose

JSON Object Signing and Encryption library for PHP.

Tuesday, May 15, 2018
by Spomky
Repository
20 Watchers
342 Stars
414,379 Installations

PHP
34 Dependents
2 Suggesters
64 Forks
6 Open issues
94 Versions
21 % Grown

The README.md

PHP JOSE Library

If you really love that library, then you can help me out for a couple of :beers:!, _(*1)

, _(*2)

:warning::warning::warning:, _(*3)

We highly recommend you to use the new JWT Framework project instead of this library., _(*4)

Active support of this library is provided until end of 2018.
Security support will be provided from 2019 and up to end of 2020.

A migration guide will be/is available in the documentation of the new project., _(*5)

:warning::warning::warning:, _(*6)

, _(*7)

, _(*8)

, _(*9)

, _(*10)

, _(*11)

This library provides an implementation of:, _(*12)

Provided Features

Supported Input Types:

JWS or JWE objects support every input that can be encoded into JSON:, _(*13)

[x] string, array, integer, float...
[x] Objects that implement the \JsonSerializable interface such as JWKInterface or JWKSetInterface

The detached content is also supported., _(*14)

Unencoded payload is supported. This means you can sign and verify payload without base64 encoding operation. As per the RFC7797, the b64 header MUST be protected. When b64 header is set, the crit protected header with value b64 in its array of values is mandatory., _(*15)

Supported Serialization Modes

[x] Compact JSON Serialization Syntax (JWS/JWE creation and loading)
[x] Flattened JSON Serialization Syntax (JWS/JWE creation and loading)
[x] General JSON Serialization Syntax (JWS/JWE creation and loading)

Supported Compression Methods

Compression Method	Supported	Comment
Deflate (`DEF`)	YES
GZip (`GZ`)	YES	This compression method is not described in the specification
ZLib (`ZLIB`)	YES	This compression method is not described in the specification

Supported Key Types (JWK)

Key Type	Supported	Comment
`none`	YES	None keys are for the `none` algorithm only
`oct`	YES	Symmetric keys
`RSA`	YES	RSA based asymmetric keys
`EC`	YES	Elliptic Curves based asymmetric keys
`OKP`	YES	Octet Key Pair based asymmetric keys

JWK objects support JSON Web Key Thumbprint (RFC 7638)., _(*16)

Key Sets (JWKSet)

JWKSet is fully supported., _(*17)

Supported Signature Algorithms

Signature Algorithm	Supported	Comment
`HS256`, `HS384` and `HS512`	YES
`HS256`, `ES384` and `ES512`	YES
`RS256`, `RS384` and `RS512`	YES
`PS256`, `PS384` and `PS512`	YES
`none`	YES	Please note that this is not a secured algorithm. USE IT WITH CAUTION!
`EdDSA` with `Ed25519` curve	YES	Third party extension required
`EdDSA` with `Ed448` curve	NO

Please note that the EdDSA signature algorithm specification is not not yet approved. Support for algorithms Ed25518 and Ed448 may change. Use with caution., _(*18)

Supported Key Encryption Algorithms

Key Encryption Algorithm	Supported	Comment
`dir`	YES
`RSA1_5`, `RSA-OAEP` and `RSA-OAEP-256`	YES
`ECDH-ES`, `ECDH-ES+A128KW`, `ECDH-ES+A192KW` and `ECDH-ES+A256KW`	YES
`A128KW`, `A128KW` and `A128KW`	YES
`PBES2-HS256+A128KW`, `PBES2-HS384+A192KW` and `PBES2-HS512+A256KW`	YES
`A128GCMKW`, `A192GCMKW` and `A256GCMKW`	YES	For better performance, please use PHP 7.1+ or this third party extension
`EdDSA` with `X25519` curve	YES	Third party extension required
`EdDSA` with `X448` curve	NO

Please note that the EdDSA encryption algorithm specification is not not yet approved. Support for algorithms X25518 and X448 may change. Use with caution., _(*19)

Supported Content Encryption Algorithms

Content Encryption Algorithm	Supported	Comment
`A128CBC-HS256`, `A192CBC-HS384` and `A256CBC-HS512`	YES
`A128GCM`, `A192GCM` and `A256GCM`	YES	For better performance, please use PHP 7.1+ or this third party extension

The Release Process

The release process is described here., _(*20)

Prerequisites

This library needs at least: * , * OpenSSL extension., _(*21)

Please consider the following optional requirements: * For AES-GCM based algorithms (AxxxGCM and AxxxGCMKW) if not on PHP 7.1+: PHP Crypto Extension (at least v0.2.1) is highly recommended as encryption/decryption is faster than the pure PHP implementation. * For Ed25519 algorithm: php-ed25519-ext required * For X25519 algorithm: php-curve25519-ext required, _(*22)

Please read performance test results below concerning the ECC based algorithms. As the time needed to perform operation is long compared to the other algorithms, we do not recommend their use., _(*23)

Continuous Integration

It has been successfully tested using PHP 7.0, PHP 7.1 and PHP7.2 with all algorithms. If you use PHP 5.6, please install the version ^6.0 of this project., _(*24)

Tests vectors from the RFC 7520 are fully implemented and all tests pass., _(*25)

We also track bugs and code quality using Scrutinizer-CI and Sensio Insight., _(*26)

Coding Standards are verified by StyleCI., _(*27)

Code coverage is analyzed by Coveralls.io., _(*28)

Installation

The preferred way to install this library is to rely on Composer:, _(*29)

composer require spomky-labs/jose

How to use

Have a look at How to use to know how to load your JWT and discover all possibilities provided by this library., _(*30)

Performances

Please read the performance page to know how fast are the algorithms supported by this library., _(*31)

Contributing

Requests for new features, bug fixed and all other ideas to make this library useful are welcome. If you feel comfortable writting code, you could try to fix opened issues where help is wanted or those that are easy to fix., _(*32)

Do not forget to follow these best practices., _(*33)

Licence

This software is release under MIT licence., _(*34)

The Versions

15/05 2018

dev-master

9999999-dev https://github.com/Spomky-Labs/Jose

JSON Object Signing and Encryption library for PHP.

library jose

JSON Object Signing and Encryption library for PHP.

spomky-labs/jose

The README.md

PHP JOSE Library

Provided Features

Supported Input Types:

Supported Serialization Modes

Supported Compression Methods

Supported Key Types (JWK)

Key Sets (JWKSet)

Supported Signature Algorithms

Supported Key Encryption Algorithms

Supported Content Encryption Algorithms

The Release Process

Prerequisites

Continuous Integration

Installation

How to use

Performances

Contributing

Licence

The Versions

dev-master

The Requires

The Development Requires

by All Contributors

by Florent Morselli

v7.1.0

The Requires

The Development Requires

by All Contributors

by Florent Morselli

dev-CustomHttpHeaders

The Requires

The Development Requires

by All Contributors

by Florent Morselli

v6.1.x-dev

The Requires

The Development Requires

by All Contributors

by Florent Morselli

v6.1.7

The Requires

The Development Requires

by All Contributors

by Florent Morselli

dev-better-curl-error-messages

The Requires

The Development Requires

by All Contributors

by Florent Morselli

dev-analysis-zYZabA

The Requires

The Development Requires

by All Contributors

by Florent Morselli

dev-analysis-zOZRKR

The Requires

The Development Requires

by All Contributors

by Florent Morselli

v7.0.1

The Requires

The Development Requires

by All Contributors

by Florent Morselli

dev-analysis-qgDrmb

The Requires

The Development Requires

by All Contributors

by Florent Morselli

v7.0.0

The Requires

The Development Requires

by All Contributors

by Florent Morselli

v7.0.x-dev

The Requires