lcobucci/jwt

This system is a PHP library for creating, parsing, and validating JSON Web Tokens (JWTs). It provides a structured API for building tokens with various cryptographic signers, including HMAC, RSA, ECDSA, EdDSA, and Blake2b. The library enforces strict validation of claims, signatures, and time-based constraints, while offering immutable token and builder classes to ensure predictable behavior.

The project established a robust foundation for a JWT library, introducing a new immutable Builder and Facade architecture to separate token creation from validation. This period also significantly expanded cryptographic support by adding dedicated signer implementations for HMAC, RSA, and ECDSA algorithms, alongside comprehensive configuration and development tooling.

7 changes

This period focused on refactoring the core token handling to use immutable classes and introducing a comprehensive, constraint-based validation API. The changes also included significant improvements to encoding, key management, and error handling, supported by extensive new test coverage for all signing algorithms and validation constraints.

14 changes

lcobucci/jwt was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.