jwt

package module

Go to main page

Versions in this module

v4

v4.5.2

Mar 21, 2025

v4.5.1

Nov 3, 2024 GO-2025-3553

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

v4.5.0

Dec 9, 2022 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

Changes in this version

+ var DecodeStrict bool

v4.4.3

Nov 8, 2022 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

v4.4.2

Jun 4, 2022 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

v4.4.1

Mar 26, 2022 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

v4.4.0

Mar 8, 2022

retracted

GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

Changes in this version

type ParserOption

+ func WithLeeway(d time.Duration) ParserOption

v4.3.0

Feb 10, 2022 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

Changes in this version

+ var ErrTokenExpired = errors.New("token is expired")

+ var ErrTokenInvalidAudience = errors.New("token has invalid audience")

+ var ErrTokenInvalidClaims = errors.New("token has invalid claims")

+ var ErrTokenInvalidId = errors.New("token has invalid id")

+ var ErrTokenInvalidIssuer = errors.New("token has invalid issuer")

+ var ErrTokenMalformed = errors.New("token is malformed")

+ var ErrTokenNotValidYet = errors.New("token is not valid yet")

+ var ErrTokenSignatureInvalid = errors.New("token signature is invalid")

+ var ErrTokenUnverifiable = errors.New("token is unverifiable")

+ var ErrTokenUsedBeforeIssued = errors.New("token used before issued")

type ValidationError

+ func (e *ValidationError) Is(err error) bool

v4.2.0

Nov 24, 2021 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

Changes in this version

+ var DecodePaddingAllowed bool

+ func GetAlgorithms() (algs []string)

type Parser

+ func NewParser(options ...ParserOption) *Parser

+ type ParserOption func(*Parser)

+ func WithJSONNumber() ParserOption

+ func WithValidMethods(methods []string) ParserOption

+ func WithoutClaimsValidation() ParserOption

type RegisteredClaims

+ func (c *RegisteredClaims) VerifyIssuer(cmp string, req bool) bool

type ValidationError

+ func (e *ValidationError) Unwrap() error

v4.1.0

Sep 24, 2021 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

Changes in this version

+ var MarshalSingleStringAsArray = true

+ var TimePrecision = time.Second

+ type ClaimStrings []string

+ func (s *ClaimStrings) UnmarshalJSON(data []byte) (err error)

+ func (s ClaimStrings) MarshalJSON() (b []byte, err error)

+ type NumericDate struct

+ func NewNumericDate(t time.Time) *NumericDate

+ func (date *NumericDate) UnmarshalJSON(b []byte) (err error)

+ func (date NumericDate) MarshalJSON() (b []byte, err error)

+ type RegisteredClaims struct

+ Audience ClaimStrings

+ ExpiresAt *NumericDate

+ ID string

+ IssuedAt *NumericDate

+ Issuer string

+ NotBefore *NumericDate

+ Subject string

+ func (c *RegisteredClaims) VerifyAudience(cmp string, req bool) bool

+ func (c *RegisteredClaims) VerifyExpiresAt(cmp time.Time, req bool) bool

+ func (c *RegisteredClaims) VerifyIssuedAt(cmp time.Time, req bool) bool

+ func (c *RegisteredClaims) VerifyNotBefore(cmp time.Time, req bool) bool

+ func (c RegisteredClaims) Valid() error

v4.0.0

Aug 3, 2021 GO-2024-3250 +1 more

GO-2024-3250: Improper error handling in ParseWithClaims and bad documentation may cause dangerous situations in github.com/golang-jwt/jwt

GO-2025-3553: Excessive memory allocation during header parsing in github.com/golang-jwt/jwt

Changes in this version

+ const UnsafeAllowNoneSignatureType

+ const ValidationErrorAudience

+ const ValidationErrorClaimsInvalid

+ const ValidationErrorExpired

+ const ValidationErrorId

+ const ValidationErrorIssuedAt

+ const ValidationErrorIssuer

+ const ValidationErrorMalformed

+ const ValidationErrorNotValidYet

+ const ValidationErrorSignatureInvalid

+ const ValidationErrorUnverifiable

+ var ErrECDSAVerification = errors.New("crypto/ecdsa: verification error")

+ var ErrEd25519Verification = errors.New("ed25519: verification error")

+ var ErrHashUnavailable = errors.New("the requested hash function is unavailable")

+ var ErrInvalidKey = errors.New("key is invalid")

+ var ErrInvalidKeyType = errors.New("key is of invalid type")

+ var ErrKeyMustBePEMEncoded = errors.New("invalid key: Key must be a PEM encoded PKCS1 or PKCS8 key")

+ var ErrNotECPrivateKey = errors.New("key is not a valid ECDSA private key")

+ var ErrNotECPublicKey = errors.New("key is not a valid ECDSA public key")

+ var ErrNotEdPrivateKey = errors.New("key is not a valid Ed25519 private key")

+ var ErrNotEdPublicKey = errors.New("key is not a valid Ed25519 public key")

+ var ErrNotRSAPrivateKey = errors.New("key is not a valid RSA private key")

+ var ErrNotRSAPublicKey = errors.New("key is not a valid RSA public key")

+ var NoneSignatureTypeDisallowedError error

+ var SigningMethodNone *signingMethodNone

+ var TimeFunc = time.Now

+ func DecodeSegment(seg string) ([]byte, error)

+ func EncodeSegment(seg []byte) string

+ func ParseECPrivateKeyFromPEM(key []byte) (*ecdsa.PrivateKey, error)

+ func ParseECPublicKeyFromPEM(key []byte) (*ecdsa.PublicKey, error)

+ func ParseEdPrivateKeyFromPEM(key []byte) (crypto.PrivateKey, error)

+ func ParseEdPublicKeyFromPEM(key []byte) (crypto.PublicKey, error)

+ func ParseRSAPrivateKeyFromPEM(key []byte) (*rsa.PrivateKey, error)

+ func ParseRSAPrivateKeyFromPEMWithPassword(key []byte, password string) (*rsa.PrivateKey, error)

+ func ParseRSAPublicKeyFromPEM(key []byte) (*rsa.PublicKey, error)

+ func RegisterSigningMethod(alg string, f func() SigningMethod)

+ type Claims interface

+ Valid func() error

+ type Keyfunc func(*Token) (interface{}, error)

+ type MapClaims map[string]interface

+ func (m MapClaims) Valid() error

+ func (m MapClaims) VerifyAudience(cmp string, req bool) bool

+ func (m MapClaims) VerifyExpiresAt(cmp int64, req bool) bool

+ func (m MapClaims) VerifyIssuedAt(cmp int64, req bool) bool

+ func (m MapClaims) VerifyIssuer(cmp string, req bool) bool

+ func (m MapClaims) VerifyNotBefore(cmp int64, req bool) bool

+ type Parser struct

+ SkipClaimsValidation bool

+ UseJSONNumber bool

+ ValidMethods []string

+ func (p *Parser) Parse(tokenString string, keyFunc Keyfunc) (*Token, error)

+ func (p *Parser) ParseUnverified(tokenString string, claims Claims) (token *Token, parts []string, err error)

+ func (p *Parser) ParseWithClaims(tokenString string, claims Claims, keyFunc Keyfunc) (*Token, error)

+ type SigningMethod interface

+ Alg func() string

+ Sign func(signingString string, key interface{}) (string, error)

+ Verify func(signingString, signature string, key interface{}) error

+ func GetSigningMethod(alg string) (method SigningMethod)

+ type SigningMethodECDSA struct

+ CurveBits int

+ Hash crypto.Hash

+ KeySize int

+ Name string

+ var SigningMethodES256 *SigningMethodECDSA

+ var SigningMethodES384 *SigningMethodECDSA

+ var SigningMethodES512 *SigningMethodECDSA

+ func (m *SigningMethodECDSA) Alg() string

+ func (m *SigningMethodECDSA) Sign(signingString string, key interface{}) (string, error)

+ func (m *SigningMethodECDSA) Verify(signingString, signature string, key interface{}) error

+ type SigningMethodEd25519 struct

+ var SigningMethodEdDSA *SigningMethodEd25519

+ func (m *SigningMethodEd25519) Alg() string

+ func (m *SigningMethodEd25519) Sign(signingString string, key interface{}) (string, error)

+ func (m *SigningMethodEd25519) Verify(signingString, signature string, key interface{}) error

+ type SigningMethodHMAC struct

+ Hash crypto.Hash

+ Name string

+ var ErrSignatureInvalid = errors.New("signature is invalid")

+ var SigningMethodHS256 *SigningMethodHMAC

+ var SigningMethodHS384 *SigningMethodHMAC

+ var SigningMethodHS512 *SigningMethodHMAC

+ func (m *SigningMethodHMAC) Alg() string

+ func (m *SigningMethodHMAC) Sign(signingString string, key interface{}) (string, error)

+ func (m *SigningMethodHMAC) Verify(signingString, signature string, key interface{}) error

+ type SigningMethodRSA struct

+ Hash crypto.Hash

+ Name string

+ var SigningMethodRS256 *SigningMethodRSA

+ var SigningMethodRS384 *SigningMethodRSA

+ var SigningMethodRS512 *SigningMethodRSA

+ func (m *SigningMethodRSA) Alg() string

+ func (m *SigningMethodRSA) Sign(signingString string, key interface{}) (string, error)

+ func (m *SigningMethodRSA) Verify(signingString, signature string, key interface{}) error

+ type SigningMethodRSAPSS struct

+ Options *rsa.PSSOptions

+ VerifyOptions *rsa.PSSOptions

+ var SigningMethodPS256 *SigningMethodRSAPSS

+ var SigningMethodPS384 *SigningMethodRSAPSS

+ var SigningMethodPS512 *SigningMethodRSAPSS

+ func (m *SigningMethodRSAPSS) Sign(signingString string, key interface{}) (string, error)

+ func (m *SigningMethodRSAPSS) Verify(signingString, signature string, key interface{}) error

+ type StandardClaims struct

+ Audience string

+ ExpiresAt int64

+ Id string

+ IssuedAt int64

+ Issuer string

+ NotBefore int64

+ Subject string

+ func (c *StandardClaims) VerifyAudience(cmp string, req bool) bool

+ func (c *StandardClaims) VerifyExpiresAt(cmp int64, req bool) bool

+ func (c *StandardClaims) VerifyIssuedAt(cmp int64, req bool) bool

+ func (c *StandardClaims) VerifyIssuer(cmp string, req bool) bool

+ func (c *StandardClaims) VerifyNotBefore(cmp int64, req bool) bool

+ func (c StandardClaims) Valid() error

+ type Token struct

+ Claims Claims

+ Header map[string]interface{}

+ Method SigningMethod

+ Raw string

+ Signature string

+ Valid bool

+ func New(method SigningMethod) *Token

+ func NewWithClaims(method SigningMethod, claims Claims) *Token

+ func Parse(tokenString string, keyFunc Keyfunc) (*Token, error)

+ func ParseWithClaims(tokenString string, claims Claims, keyFunc Keyfunc) (*Token, error)

+ func (t *Token) SignedString(key interface{}) (string, error)

+ func (t *Token) SigningString() (string, error)

+ type ValidationError struct

+ Errors uint32

+ Inner error

+ func NewValidationError(errorText string, errorFlags uint32) *ValidationError

+ func (e ValidationError) Error() string

Other modules containing this package

github.com/golang-jwt/jwt

github.com/golang-jwt/jwt/v5

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL