Question 1

How do I handle JWT token expiration with JsonWebToken?

Accepted Answer

You need to use the companion JWT Claims package to validate the 'exp' claim, as JsonWebToken itself only handles signing and verification. After verifying the token, check the claims map for expiration and other registered claims manually or with the additional library.

Question 2

Is JsonWebToken better than Guardian for Elixir JWT?

Accepted Answer

JsonWebToken is a minimal, standards-focused library for pure JWT operations, while Guardian is a full-featured authentication framework with plug integration and more built-in functionality. Choose JsonWebToken if you need lightweight control, or Guardian for a more comprehensive solution.

Question 3

How to integrate JsonWebToken with Phoenix for API authentication?

Accepted Answer

Use JsonWebToken.sign/2 to generate tokens in your authentication controller, then verify them in plugs or endpoints with JsonWebToken.verify/2. You'll need to manage keys and potentially add the JWT Claims package for claim validation in middleware.

Question 4

What's the difference between JsonWebToken and the JWT Claims package?

Accepted Answer

JsonWebToken handles core JWT signing and verification with algorithms, while JWT Claims provides utilities for validating registered claims like issuer or expiration. They are designed to be used together for complete JWT processing.

Question 5

Can JsonWebToken be used in production for secure authentication?

Accepted Answer

Yes, it's production-ready with strict validation and support for secure algorithms like RSA and ECDSA. However, ensure you follow best practices for key management and use the JWT Claims package for claim validation to avoid security pitfalls.

Question 6

Does JsonWebToken support token refresh or revocation?

Accepted Answer

No, JsonWebToken focuses only on JWT standard implementation; token lifecycle management like refresh or revocation must be implemented separately in your application logic, using techniques like blacklists or short expiration times.

json_web_token_ex

What is json_web_token_ex?

Overview

Use Cases

Best For

Related Projects

Found a gem we're missing?

Not Ideal For

Pros & Cons

Pros

Cons

Frequently Asked Questions