djwt

With just three core functions (create, verify, decode), djwt offers a straightforward interface that reduces complexity and error-prone code, as shown in its concise examples.

Adheres strictly to JWT, JWS, and JWA RFCs, ensuring secure and interoperable token handling with built-in validation for standard claims like exp and aud.

Leverages the native Web Crypto API for key generation and signing, eliminating external dependencies and enhancing security in Deno and browser environments.

Supports a wide range of algorithms including HMAC, RSA, and ECDSA (except ES512), catering to various security needs without bloat.