pyjwkest

What it is and what it does

Pyjwkest is a Python library implementing the JOSE standards for JWT, JWS, JWE, and JWK as defined in IETF drafts. It handles creation, signing, encryption, and validation of JSON Web tokens and manages cryptographic keys used in token operations. The library depends on pycryptodomex for cryptographic primitives, requests for HTTP operations, and compatibility libraries (six, future).

The package is in Beta status and has not been actively maintained since its last release 314 days ago. While the repository remains available and has accumulated 93 stars, the maintainer has explicitly stated the library is no longer actively maintained and is seeking someone to take over responsibility. For projects already using it, the code may be stable; for new projects, this unmaintained status is a significant consideration.

Use it for:

• Signing and validating JWT tokens in authentication systems and OAuth flows
• Encrypting sensitive data in JSON Web Encryption format for secure transmission
• Managing cryptographic keys in JOSE-compliant applications
• Implementing federated identity or token exchange protocols
• Building security layers in microservices that need standardized token handling

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Implements JWT, JWS, JWE, and JWK standards for signing, encrypting, and managing JSON Web tokens and cryptographic keys.

Yes-with-conditions. The library implements mature JOSE standards and has low install friction, but its unmaintained status and aging codebase (last release 314 days ago) make it risky for new projects. Consider it only if you are maintaining existing code that already depends on it, or if you are willing to fork and maintain it yourself. For new projects, evaluate actively maintained alternatives.

Install

pyjwkest on PyPI

pip install pyjwkest

uv add pyjwkest

poetry add pyjwkest

Installing pyjwkest

Before you install

Low install friction with pure-Python wheel distribution. However, maintenance status is aging—last release was 314 days ago and the project is explicitly marked as not actively maintained, though the repository remains open.

License in practice

Licensed under Apache 2.0 (permissive), allowing use in commercial and proprietary projects with minimal restrictions.

Quickstart

pip install pyjwkest

import pyjwkest

# Create and sign a token using the library's JWT/JWS capabilities
# with pycryptodomex for cryptographic operations

Depends on pycryptodomex for cryptographic operations; compilation may require Python development headers on some systems.

Verify before relying

• Current compatibility with modern Python versions beyond 3.5 (classifiers list 3.5 but requires_python is unspecified)
• Whether unmaintained status poses security risks for new deployments or if existing code is stable enough for production use
• Active community or fork availability if bugs or security issues emerge
• Specific API usage patterns and examples beyond what the description excerpt provides

Package facts

Evidence: pyjwkest-1.4.4-py3-none-any.whl

Tags

More Python Modules packages