hub / github.com/felx/nimbus-jose-jwt

github.com/felx/nimbus-jose-jwt @5.1

Chat with this repo

repository ↗ · DeepWiki ↗ · release 5.1 ↗ · + Follow

2,155 symbols 15,001 edges 302 files 1,095 documented · 51% 18 cross-repo links

What it actually does AI analysis from the code graph — generated when you open this

loading…

README

Nimbus JOSE + JWT

The most popular and robust Java library for JSON Web Tokens (JWT)
Supports all standard signature (JWS) and encryption (JWE) algorithms
Open source Apache 2.0 licence

Check out the library homepage for more info and examples.

Full compact JOSE and JWT support

Create, serialise and process compact-encoded:

Plain (unsecured) JOSE objects
JSON Web Signature (JWS) objects
JSON Web Encryption (JWE) objects
JSON Web Key (JWK) objects and JWK sets
Plain, signed and encrypted JSON Web Tokens (JWTs)

The less frequently used alternative JSON encoding is on the road map.

Supported JOSE algorithms

The library can handle all standard JOSE algorithms:

HMAC integrity protection: HS256, HS384 and HS512
RSASSA-PKCS1-V1_5 signatures: RS256, RS384 and RS512
RSASSA-PSS signatures: PS256, PS384 and PS512
EC signatures: ES256, ES384 and ES512
Key encryption with RSAES-PKCS1-V1_5: RSA1_5 (deprecated)
Key encryption with RSAES OAEP: RSA-OAEP and RSA-OAEP-256
Key encryption with AES key wrap: A128KW, A192KW and A256KW
Key encryption with AES GCM: A128CGMKW, A192CGMKW and A256CGMKW
Direct shared symmetric key encryption: dir
Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static: ECDH-ES, ECDH-ES+A128KW, ECDH-ES+A192KW and ECDH-ES+A256KW
Password-based encryption: PBES2-HS256+A128KW, PBES2-HS384+A192KW and PBES2-HS512+A256KW
Content encryption with AES_CBC_HMAC_SHA2: A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, the deprecated A128CBC+HS256 and A256CBC+HS512 are also supported
Content encryption with AES GCM: A128GCM, A192GCM and A256GCM
JWE Compression with DEFLATE.

Supported IETF standards

RFC 7515 - JSON Web Signature (JWS)
RFC 7516 - JSON Web Encryption (JWE)
RFC 7517 - JSON Web Key (JWK)
RFC 7518 - JSON Web Algorithms (JWA)
RFC 7519 - JSON Web Token (JWT)
RFC 7520 - Examples of Protecting Content Using JSON Object Signing and Encryption (JOSE)
RFC 7165 - Use Cases and Requirements for JSON Object Signing and Encryption (JOSE)
RFC 8037 - CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE)

System requirements and dependencies

The Nimbus JOSE+JWT library requires Java 7+ and has minimal dependencies.

JSON Smart for highly efficient parsing and serialisation of JSON.
JCIP for concurrency annotations.
[optional] BouncyCastle as an alternative JCA provider.

For Maven add:

<dependency>
    <groupId>com.nimbusds</groupId>
    <artifactId>nimbus-jose-jwt</artifactId>
    <version>[ version ]</version>
</dependency>

where [ version ] is the latest stable version.

To post bug reports and suggestions:

https://bitbucket.org/connect2id/nimbus-jose-jwt/issues

Follow updates and new releases on Twitter:

https://twitter.com/connect2id

Extension points exported contracts — how you extend this code

JWSSigner (Interface)

JSON Web Signature (JWS) signer. @author Vladimir Dzhuvinov @version 2015-04-21 [7 implementers]

src/main/java/com/nimbusds/jose/JWSSigner.java

JWSVerifier (Interface)

JSON Web Signature (JWS) verifier. @author Vladimir Dzhuvinov @version 2015-04-21 [9 implementers]

src/main/java/com/nimbusds/jose/JWSVerifier.java

JWEDecrypter (Interface)

JSON Web Encryption (JWE) decrypter. @author Vladimir Dzhuvinov @version 2015-04-21 [15 implementers]

src/main/java/com/nimbusds/jose/JWEDecrypter.java

JWEEncrypter (Interface)

JSON Web Encryption (JWE) encrypter. @author Vladimir Dzhuvinov @version 2015-05-21 [16 implementers]

src/main/java/com/nimbusds/jose/JWEEncrypter.java

CriticalHeaderParamsAware (Interface)

JSON Web Signature (JWS) verifier or JSON Web Encryption (JWE) decrypter that supports processing and / or deferral of c [17 …

src/main/java/com/nimbusds/jose/CriticalHeaderParamsAware.java

Core symbols most depended-on inside this repo

build

called by 517

src/main/java/com/nimbusds/jose/jwk/ECKey.java

toString

called by 486

src/main/java/com/nimbusds/jose/jwk/JWK.java

size

called by 359

src/main/java/com/nimbusds/jose/jwk/JWK.java

add

called by 303

src/main/java/com/nimbusds/jose/AlgorithmFamily.java

equals

called by 301

src/main/java/com/nimbusds/jose/jwk/Curve.java

getState

called by 295

src/main/java/com/nimbusds/jose/JWEObject.java

getJCAContext

called by 224

src/main/java/com/nimbusds/jose/jca/JCAAware.java

get

called by 206

src/main/java/com/nimbusds/jose/jwk/source/JWKSource.java

Shape

Method 1,840

Class 274

Interface 33

Enum 8

Languages

Java100%

Modules by API surface

src/main/java/com/nimbusds/jose/jwk/RSAKey.java50 symbols

src/test/java/com/nimbusds/jwt/JWTClaimsSetTest.java43 symbols

src/main/java/com/nimbusds/jose/jwk/JWKMatcher.java42 symbols

src/main/java/com/nimbusds/jose/JWEHeader.java41 symbols

src/main/java/com/nimbusds/jwt/JWTClaimsSet.java38 symbols

src/test/java/com/nimbusds/jose/jwk/JWKMatcherTest.java37 symbols

src/test/java/com/nimbusds/jose/jwk/ECKeyTest.java37 symbols

src/main/java/com/nimbusds/jose/jwk/ECKey.java35 symbols

src/test/java/com/nimbusds/jwt/proc/DefaultJWTProcessorTest.java29 symbols

src/test/java/com/nimbusds/jose/jwk/RSAKeyTest.java29 symbols

src/main/java/com/nimbusds/jose/jwk/OctetKeyPair.java28 symbols

src/main/java/com/nimbusds/jose/jwk/OctetSequenceKey.java25 symbols

Used by 18 indexed graphs manifest dependencies, hub-wide

github.com/IRS-Public/direct-file

github.com/JanusGraph/janusgraph

github.com/alibaba/nacos

github.com/apache/doris

github.com/apache/druid

github.com/apache/zeppelin

github.com/apolloconfig/apollo

github.com/cryptomator/cryptomator

github.com/eugenp/tutorials

github.com/flyway/flyway

… +8 more

For agents

$ claude mcp add nimbus-jose-jwt \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact