jwtjwtdecoded.com
Reference

JWT libraries by language

Hand-picked, actively maintained packages for signing and verifying JWTs across the runtimes you're most likely to ship. The “Editor's pick” in each section is the one we'd reach for first.

JSNode.js / JavaScript

4 packages

joseEditor's pick
$ npm i jose

Modern, zero-dep, runs in Node, Deno, Bun and the browser. Covers JWS, JWE, JWK and JWKS out of the box.

JWSJWEJWKEdge
View
jsonwebtoken
$ npm i jsonwebtoken

The classic. Synchronous API, widely understood, but minimal JWK/JWKS support — pair with jwks-rsa for asymmetric flows.

Classic
View
@nestjs/jwt
$ npm i @nestjs/jwt

NestJS module wrapping jsonwebtoken with DI-friendly providers.

NestJS
View
jwt-decode
$ npm i jwt-decode

Browser-safe decoder only. Don't use this to verify — it deliberately doesn't.

Decode-only
View

PYPython

3 packages

PyJWTEditor's pick
$ pip install PyJWT

The standard. Clean encode/decode API, supports HS/RS/ES/EdDSA. Add the [crypto] extra for asymmetric keys.

Standard
View
Authlib
$ pip install Authlib

Full OAuth 2.0 / OIDC toolkit. Reach for it when you need flows and discovery, not just tokens.

OAuthOIDC
View
python-jose
$ pip install python-jose

JOSE implementation covering JWS, JWE, JWK. Less actively maintained than PyJWT in 2024+.

JOSE
View

GOGo

2 packages

github.com/golang-jwt/jwt/v5Editor's pick
$ go get github.com/golang-jwt/jwt/v5

Community fork of the original dgrijalva/jwt-go after that project was archived. The de-facto Go JWT library.

Idiomatic
View
github.com/lestrrat-go/jwx
$ go get github.com/lestrrat-go/jwx/v2

Full JOSE suite (JWS, JWE, JWK, JWA). Use when you need JWE or JWKS handling beyond plain JWT.

JOSEJWKS
View

RSRust

2 packages

jsonwebtokenEditor's pick
$ cargo add jsonwebtoken

Pragmatic, well-maintained crate covering HS/RS/ES/EdDSA. Excellent error messages.

Idiomatic
View
josekit
$ cargo add josekit

Full JOSE implementation in pure Rust — JWS, JWE, JWK. Heavier than the alternative.

JOSE
View

JVJava / Kotlin

3 packages

jjwt (io.jsonwebtoken)Editor's pick
$ implementation 'io.jsonwebtoken:jjwt-api:0.12.6'

Fluent Java API for signing and verifying. Split into api / impl / jackson modules so you only pull what you use.

Fluent
View
Nimbus JOSE + JWT
$ implementation 'com.nimbusds:nimbus-jose-jwt:9.40'

Industrial-grade JOSE library used by Spring Security under the hood. Reach for it when you need JWE or detailed JWK control.

JOSESpring
View
auth0 java-jwt
$ implementation 'com.auth0:java-jwt:4.4.0'

Simple builder/verifier API from Auth0. Good for straightforward use, less flexible than Nimbus.

Simple
View

C#.NET / C#

2 packages

Microsoft.IdentityModel.TokensEditor's pick
$ dotnet add package System.IdentityModel.Tokens.Jwt

Microsoft's first-party JOSE/JWT stack. The default for ASP.NET Core authentication handlers.

MicrosoftASP.NET
View
JWT.NET (jwt-dotnet)
$ dotnet add package JWT

Small, library-only alternative. Useful in CLI tools or when you don't want the full Microsoft stack.

Lightweight
View

RBRuby

1 package

ruby-jwtEditor's pick
$ gem install jwt

The Ruby community standard. Supports HS/RS/ES/EdDSA and integrates cleanly with Rails.

Rails
View

PHPPHP

2 packages

firebase/php-jwtEditor's pick
$ composer require firebase/php-jwt

Compact, dependency-free. Used by Laravel/Lumen ecosystems and most PHP frameworks.

Standard
View
web-token/jwt-framework
$ composer require web-token/jwt-framework

Full JOSE framework with JWS, JWE, JWK and key management. Reach for it on complex Symfony setups.

JOSESymfony
View

SWSwift

1 package

JWTKit (Vapor)Editor's pick
$ .package(url: "https://github.com/vapor/jwt-kit.git", from: "4.0.0")

Apple-platform-native JWT signing and verification. Used by Vapor but works standalone.

Vapor
View

EXElixir

1 package

jokenEditor's pick
$ {:joken, "~> 2.6"}

Configurable token validation with named token configurations. Pairs with joken_jwks for JWKS rotation.

JWKS
View