Skip to content

Support JWE #17

@gbrlsnchs

Description

@gbrlsnchs

In issue #15 I was asked about storing user information within the token. Of course, with only JWS, it is not safe, since user information would be stored client side. However, we could fix it by using JWE, which this library doesn't support right now.

I think this library could benefit from supporting JWE too. v2 was designed to fix performance issues with v1, but it is too verbose and doesn't allow JWE to be implemented so easily (actually, I think implementing JWE in v2 would force a major version bump anyway).

References:
https://tools.ietf.org/html/rfc7516

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requesthelp wantedExtra attention is needed

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions