A Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token) for creating and verifying secure tokens.
Delphi JOSE and JWT is a library that provides a comprehensive implementation of the JOSE specification suite and JSON Web Tokens for the Delphi programming language. It enables developers to easily integrate secure token-based authentication and data exchange into their Delphi applications, supporting modern web security standards like JWS, JWA, and JWK.
Delphi developers building applications that require secure token-based authentication, such as REST APIs, web services, or client-server systems needing JWT validation and generation.
Developers choose this library for its strict adherence to JOSE and JWT RFC standards, security hardening against known vulnerabilities like the 'None' algorithm, and its balance of high-level utilities for common tasks with low-level classes for fine-grained control.
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Implements JWT, JWS, JWA, and JWK standards with built-in validation for standard claims like exp, iat, and aud, as detailed in the README's claims table.
Supports a wide range including HS256, RS256, ES256, and ES256K, covering common security needs with updates marked as 'new' or 'updated' in the features list.
Not affected by the 'None' algorithm vulnerability or other known JWT library vulnerabilities, ensuring robust protection against exploits.
Provides high-level utilities like TJOSEProducer and TJOSEConsumer for streamlined token handling, with single method calls for serialization and deserialization shown in code examples.
JWE (JSON Web Encryption) is listed in the Todo section as planned but not implemented, limiting the library to signing without native encryption capabilities.
For RSA and ECDSA algorithms, OpenSSL DLLs are required on servers, adding deployment complexity and maintenance overhead, as noted in the OpenSSL requirements section.
Tied to Delphi's niche ecosystem, which may result in slower updates, fewer community contributions, and compatibility issues compared to more popular programming languages.