paragonie/paseto

Platform-Agnostic Security Tokens

PASETO: Platform-Agnostic Security Tokens

, _(*1)

Paseto (pɔːsɛtəʊ, paw-set-oh) is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards., _(*2)

This library is a reference implementation of PASETO in the PHP language. Please refer to the PASETO Specification for design considerations., _(*3)

How to Use this Library

See the documentation., _(*4)

The PASETO specification may also be useful for understanding why things are designed the way they are., _(*5)

PASETO Extensions

PASERK

For key wrapping, serialization, and canonical identification, please see the PHP implementation of PASERK., _(*6)

If you're not sure what that means, please refer to the PASERK specification., _(*7)

Since PASERK is a PASETO extension, PASERK support is not automatically included with PASETO, but PASETO is bundled with PASERK., _(*8)

Requirements

PHP PASETO Library Version 3

• Requires PHP 8.1 or newer.
• For v3 tokens, the GMP and OpenSSL extensions are required.
• For v4 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
• PASETO Protocol versions: v3, v4

PHP PASETO Library Version 2

• Requires PHP 7.1 or newer.
• For v3 tokens, the GMP and OpenSSL extensions are required.
• For v4 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
• PASETO Protocol versions: v1, v2, v3, v4

PHP PASETO Library Version 1

• Requires PHP 7.0 or newer.
• For v1 tokens, the OpenSSL extension is required.
• For v2 tokens, the Sodium extension is strongly recommended (but this library will use sodium_compat if it's not).
• PASETO Protocol versions: v1, v2

Support Contracts

If your company uses this library in their products or services, you may be interested in purchasing a support contract from Paragon Initiative Enterprises., _(*9)