thamtech/yii2-jws

JWS Token Manager

yii2-jws

An extension to manage signed JWS tokens, _(*1)

This library interfaces with namshi/jose to generate signed JWS tokens., _(*2)

For license information check the LICENSE-file., _(*3)

Installation

The preferred way to install this extensions is through composer., _(*4)

Either run, _(*5)

php composer.phar require --prefer-dist thamtech/yii2-jws

or add, _(*6)

"thamtech/yii2-jws": "*"

to the require section of your composer.json file., _(*7)

Integration

1. Generate a kepair using OpenSSL and store the keys in public.pem and private.pem., _(*8)

2. Add the JwsManager application component in your site configuration:, _(*9)

   return [
     'components' => [
       'jwsManager' => [
         'class' => 'thamtech\jws\components\JwsManager',
         'pubkey' => '@app/config/keys/jws/public.pem',
         'pvtkey' => '@app/config/keys/jws/private.pem',
   
         // The settings below are optional. Defaults will be used if not set here.
         //'encoder' => 'Namshi\JOSE\Base64\Base64UrlSafeEncoder',
         //'exp' => '1 hour',
         //'alg' => 'RS256',
         //'jwsClass' => 'Namshi\JOSE\SimpleJWS',
       ],
     ]
   ]
   

Usage

Generate a new token:, _(*10)

$payload = [
  "user_id": 23,
  "foo": "bar",
];
$tokenString = Yii::$app->jwsManager->newToken($payload);

Verify that this string is a token that we signed:, _(*11)

$token = Yii::$app->jwsManager->load($tokenString);
$result = Yii::$app->jwsManager->verify($token);

Verify that this string is a token that we signed AND (if it is an instance of \Namshi\JOSE\SimpleJWS wih an expiration) that it is not expired:, _(*12)

$token = Yii::$app->jwsManager->load($tokenString);
$result = Yii::$app->jwsManager->isValid($token);

See Also

• cranetm/yii2-json-rpc-2.0 - Yii 2 extension that helps turn your Controllers into JSON RPC 2.0 APIs., _(*13)

• namshi/jose - PHP implementation of the JWS (JSON Web Signature) specification., _(*14)

• JSON Web Token (JWT) - JWT specifications, _(*15)

• JSON Web Signature (JWS) - JWS specifications, _(*16)

• thamtech/yii2-jsonrpc-jwsauth, _(*17)