Download the PHP package aetah/jose without Composer
On this page you can find all versions of the php package aetah/jose. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Package jose
Short Description Generic PHP library for JOSE and compact JWS processing primitives
License AGPL-3.0-or-later
Informations about the package jose
Read-Only Split Notice
This repository is a read-only split of aetah/php-openid-toolkit.
- Development happens in the monorepo.
- Feature PRs and issues should be opened against
aetah/php-openid-toolkit. - This split repository is published from the monorepo and should not be treated as the source of truth.
JOSE
Generic PHP library for low-level JOSE and compact JWS processing primitives.
Scope
This package is designed as a reusable base for aetah/* libraries and CMS
integrations. It provides:
- base64url helpers for JOSE payloads
- compact JWS parsing into typed header/payload/signature data
- signing helpers for
HS*,RS*, andEdDSA - verification helpers for PEM keys, shared secrets, JWKs, and JWKS sets
- RSA JWK to PEM conversion for public-key verification
- duplicate-aware JSON object decoding
- bounded public-RSA JWKS parsing and validation, including public-material, algorithm, key-operation, unique-key-ID, and minimum-strength checks
The package intentionally leaves token profile validation, claim policy, discovery, key persistence, and HTTP endpoint orchestration to host applications.
Install
Quick Start
Public RSA key sets can be parsed from their original JSON representation:
Use validatePublicRsaJwks() to apply the same validation to keys restored from
a cache or another trusted storage boundary. JSON objects with duplicate member
names are rejected before their values can be interpreted.
Spec
- JSON Web Signature (RFC 7515): https://www.rfc-editor.org/rfc/rfc7515
- JSON Web Key (RFC 7517): https://www.rfc-editor.org/rfc/rfc7517
- JSON Web Algorithms (RFC 7518): https://www.rfc-editor.org/rfc/rfc7518
- JSON Web Token (RFC 7519): https://www.rfc-editor.org/rfc/rfc7519
Spec Status
Missing/out of scope:
- JWE encryption and decryption
- X.509 certificate chain processing
- remote JWKS retrieval and caching
- OAuth or OpenID Connect claim validation profiles
- detached payload and general JSON serialization handling
Quality Checks
Run Static Analysis
Run Tests
Generated artifacts are written under build/:
build/phpunit/for JUnit reportsbuild/coverage/for coverage output
Clean Build Artifacts
Run Test Coverage
Run Style Checks
Fix Style Checks
License
Licensed under AGPL-3.0-or-later. See LICENSE for details.