joserfc

The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT

joserfc Permissive license BSD-3-Clause Active v1.7.4 released 2026-07-19

Install

joserfc on PyPI

pip

pip install joserfc

uv

uv add joserfc

poetry

poetry add joserfc

Package facts

License	BSD-3-Clause (permissive)
Python support	supports the current Python release (>=3.10)
Install friction	low — pure-Python wheel
Runtime dependencies	1 — cryptography
Maintenance	actively maintained — 25 days since the last release
First released	2023-03-05
Popularity	one of the top 1,000 most-downloaded packages on PyPI (30-day window, as of 2026-08-13)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-13)

Evidence: joserfc-1.7.4-py3-none-any.whl

Development Status :: 5 - Production/StableEnvironment :: ConsoleEnvironment :: Web EnvironmentIntended Audience :: DevelopersLicense :: OSI Approved :: BSD LicenseOperating System :: OS IndependentProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Programming Language :: Python :: Implementation :: CPythonProgramming Language :: Python :: Implementation :: PyPyTopic :: SecurityTopic :: Security :: Cryptography

About joserfc

from the package's own PyPI description — quoted content, verbatim

JOSE RFC

joserfc is a Python library that provides a comprehensive implementation of several essential JSON Object Signing and Encryption (JOSE) standards.

This package contains implementation of:

RFC7515: JSON Web Signature
RFC7516: JSON Web Encryption
RFC7517: JSON Web Key
RFC7518: JSON Web Algorithms
RFC7519: JSON Web Token
RFC7520: Examples of Protecting Content Using JSON Object Signing and Encryption
RFC7638: JSON Web Key (JWK) Thumbprint
RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
RFC8037: OKP Key and EdDSA algorithm
RFC8812: ES256K algorithm
RFC9278: JWK Thumbprint URI
RFC9864: Ed25519 and Ed448 algorithms

And draft RFCs implementation of:

draft-ietf-jose-deprecate-none-rsa15-02
draft-amringer-jose-chacha-02
draft-madden-jose-ecdh-1pu-04

Usage

A quick and simple JWT encoding and decoding would look something like this:

.. code-block:: python

&gt;&gt;&gt; from joserfc import jwt, jwk
&gt;&gt;&gt; key = jwk.import_key("your-secret-key", "oct")
&gt;&gt;&gt; encoded_jwt = jwt.encode({"alg": "HS256"}, {"k": "value"}, key)
&gt;&gt;&gt; encoded_jwt...

Read as markdown · JSON record · Source repository · Docs

AI interpretation — verify before relying

AI-generated interpretation of the package facts above; every digit, version, license, or vulnerability id it cites is grounded in the facts already shown on this page

joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for cryptographic signing, encryption, and token handling in Python.

Low friction: pure Python wheel with a single runtime dependency on cryptography. Actively maintained with a release 25 days ago.

BSD-3-Clause is permissive; you may use, modify, and distribute joserfc freely in commercial and private projects provided you retain the license notice.

Usage

pip install joserfc

from joserfc import jwt, jwk
key = jwk.import_key("your-secret-key", "oct")
encoded = jwt.encode({"alg": "HS256"}, {"k": "value"}, key)
token = jwt.decode(encoded, key)

Requires Python 3.10 or later; cryptography must be installed.

Verdict: joserfc is a production-stable, actively maintained JOSE implementation with no known vulnerabilities, low install friction, and permissive licensing. It is suitable for JWT and cryptographic token workflows in modern Python applications.

Needs verification

Performance characteristics and throughput compared to alternative JOSE libraries in typical workloads.
Extent of real-world adoption beyond the top-1000 PyPI tier ranking.

jwt encode decodejson web token libraryjose jws jwe implementationcryptographic signing encryptionjson web key managementrfc 7515 7516 7519token authentication python