---
id: joserfc
version: "1.7.4"
license: BSD-3-Clause
license_treatment: permissive
maintenance: active
---

# joserfc — The ultimate Python library for JOSE RFCs, including JWS, JWE, JWK, JWA, JWT

License: permissive · Maintenance: active · Popularity: top 1,000 on PyPI

## Install

pip install joserfc
uv add joserfc
poetry add joserfc

## Description

JOSE RFC
========

``joserfc`` is a Python library that provides a comprehensive implementation of several
essential JSON Object Signing and Encryption (JOSE) standards.

This package contains implementation of:

- RFC7515: JSON Web Signature
- RFC7516: JSON Web Encryption
- RFC7517: JSON Web Key
- RFC7518: JSON Web Algorithms
- RFC7519: JSON Web Token
- RFC7520: Examples of Protecting Content Using JSON Object Signing and Encryption
- RFC7638: JSON Web Key (JWK) Thumbprint
- RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
- RFC8037: OKP Key and EdDSA algorithm
- RFC8812: ES256K algorithm
- RFC9278: JWK Thumbprint URI
- RFC9864: ``Ed25519`` and ``Ed448`` algorithms

And draft RFCs implementation of:

- draft-ietf-jose-deprecate-none-rsa15-02
- draft-amringer-jose-chacha-02
- draft-madden-jose-ecdh-1pu-04

Usage
-----

A quick and simple JWT encoding and decoding would look something like this:

.. code-block:: python

    >>> from joserfc import jwt, jwk
    >>> key = jwk.import_key("your-secret-key", "oct")
    >>> encoded_jwt = jwt.encode({"alg": "HS256"}, {"k": "value"}, key)
    >>> encoded_jwt...

## AI interpretation — verify before relying

joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for cryptographic signing, encryption, and token handling in Python.

Verdict: joserfc is a production-stable, actively maintained JOSE implementation with no known vulnerabilities, low install friction, and permissive licensing. It is suitable for JWT and cryptographic token workflows in modern Python applications.

[View on SkillFed](https://skillfed.io/packages/joserfc) · [View on PyPI](https://pypi.org/project/joserfc/)