jwt icon indicating copy to clipboard operation
jwt copied to clipboard

Published 20 hours ago • verified publisher icon gbrlsnchs

Support JWE

Open gbrlsnchs opened this issue 6 years ago • 0 comments

In issue #15 I was asked about storing user information within the token. Of course, with only JWS, it is not safe, since user information would be stored client side. However, we could fix it by using JWE, which this library doesn't support right now.

I think this library could benefit from supporting JWE too. v2 was designed to fix performance issues with v1, but it is too verbose and doesn't allow JWE to be implemented so easily (actually, I think implementing JWE in v2 would force a major version bump anyway).

References: https://tools.ietf.org/html/rfc7516

gbrlsnchs avatar Feb 05 '19 11:02 gbrlsnchs