{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/5"},{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/2"},{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"Encodes and decodes JSON Web Tokens (JWTs) with signature verification, supporting symmetric and asymmetric algorithms including RS256, HS256, and PS256.","skillfed_tags":["authentication","cryptography","token-signing"],"use_cases":["Build stateless authentication systems where tokens are signed and verified without server-side session storage","Implement OAuth 2.0 or OpenID Connect flows requiring JWT access and ID tokens","Create API authentication where clients include signed tokens in request headers","Validate third-party tokens from external identity providers using their public keys","Secure inter-service communication in microservices by signing and verifying service-to-service tokens"],"what_it_does":"python-jwt is a JSON Web Token implementation for Python that handles the full lifecycle of JWT creation and validation. It provides a JWT class for encoding messages into signed tokens and decoding them with signature verification, supporting both symmetric algorithms (HS256, HS384, HS512) and asymmetric algorithms (RS256, RS384, RS512, PS256, PS384, PS512). The library integrates with the cryptography package for key management and can load keys from JWK dictionaries or PEM files.\n\nThe package is designed for authentication and authorization workflows where you need to create tamper-proof tokens, verify their signatures, and validate claims like expiration time. It follows the JWT specification and includes utilities for working with datetime objects in token claims. The library is marked Production/Stable and supports Python 3.9 and later versions.","worth_installing":"Yes. The package offers a straightforward, production-stable JWT implementation with low install friction and no known vulnerabilities. It covers the core JWT use cases with support for modern algorithms and key formats. The aging maintenance status (last commit 417 days ago) is not a blocker for a stable, mature library, but indicates you should not expect frequent feature additions\u2014suitable if you need reliable JWT handling without expecting active development."},"id":"jwt","links":{"html":"https://skillfed.io/packages/jwt","md":"https://skillfed.io/packages/jwt.md","pypi":"https://pypi.org/project/jwt/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2025-06-23","license_spdx":null,"license_treatment":"permissive","name":"jwt","python_support":"supports_current","summary":"JSON Web Token library for Python 3."},"popularity":{"monthly_downloads":3781603,"position":2499,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.4.0"}