Nimbus JOSE + JWT v. 2.14.0

Nimbus JOSE+JWT

See:
Description

Packages

com.nimbusds.jose	Javascript Object Signing and Encryption (JOSE) classes.
com.nimbusds.jose.crypto	Implementations of selected Javascript Object Signing and Encryption (JOSE) algorithms.
com.nimbusds.jose.jwk	JSON Web Key (JWK) classes.
com.nimbusds.jose.util	Base64, Base64URL, compression and JSON utility classes.
com.nimbusds.jwt	JSON Web Token (JWT) classes.

Nimbus JOSE+JWT

Nimbus JOSE+JWT implements the Javascript Object Signing and Encryption (JOSE) spec suite and the closely related JSON Web Token (JWT) spec.

The library supports creating, querying, serialising and parsing of the following JOSE and JWT objects:

• Plain (unsecured) JOSE objects.
• JSON Web Signature (JWS) objects.
• JSON Web Encryption (JWE) objects.
• JSON Web Key (JWK) objects and JSON Web Key (JWK) Sets.
• Plain, signed and encrypted JSON Web Tokens (JWTs).

The JOSE and JWT object representation is completely decoupled from JSON Web Algorithm (JWA) implementations through a set of simple interfaces for signing, validating, encrypting and decrypting the objects.

The library currently ships ready implementations of the following standard algorithms:

• JWS:
  • HMAC signatures with HS256, HS384 and HS512.
  • RSA signatures with RS256, RS384 and RS512.
  • EC signatures with ES256, ES384 and ES512.
• JWE:
  • RSAES-PKCS1-V1_5 encryption with A128CBC_HS256, A256CBC_HS512, A128GCM and A256GCM methods.
  • RSAES OAEP encryption with A128CBC_HS256, A256CBC_HS512, A128GCM and A256GCM methods.
  • Direct encryption with A128CBC_HS256, A256CBC_HS512, A128GCM and A256GCM methods.

Related IETF drafts:

• [JWA] draft-ietf-jose-json-web-algorithms-08
• [JWS] draft-ietf-jose-json-web-signature-08
• [JWE] draft-ietf-jose-json-web-encryption-08
• [JWK] draft-ietf-jose-json-web-key-08
• [JPSK] draft-jones-jose-json-private-and-symmetric-key-00
• [JWT] draft-ietf-oauth-json-web-token-06

Dependencies:

• Apache Commons Codec for Base64 and Base64URL encoding and decoding.
• JSON Smart for highly efficient parsing and serialisation of JSON.
• [optional] The BouncyCastle.org cryptography provider for Java, for ECDSA, RSA encryption and AES-GCM.