A Python implementation of the JOSE (Javascript Object Signing and Encryption) framework, providing support for JSON Web Tokens (JWTs) using JWS (signatures) and JWE (encrypted claims). Useful for securely transferring claims such as authorization information between parties, including the ability to authenticate using JWS and keep claims opaque via JWE (with a subset of recommended algorithms).
Project status
- The repository appears quiet and not actively maintained, with the last upstream push dated 2024-05-30, and the most recent tagged update being 0.2.2 from 2015, long before today (2026-09-10).
- Update cadence is effectively stalled, with no evidence of ongoing work, frequent releases, or recent maintenance updates since the 2015-01-15 tag.
AI summary generated
Recent updates
0.2.2
Version 0.2.2 adds a mechanism to distinguish between legacy and newly issued JWE tokens by injecting a temporary version marker (__v). The core JWE encryption and authentication logic was modified to correct RFC compliance issues while keeping this version able to decrypt both legacy and newly issued tokens.
0.2.1
This release (0.2.1) introduces a new error handling model via a jose.Error base exception plus specific claim-validation exceptions (jose.Expired, jose.NotYetValid). It also adds optional claim validation controls to token verification/decryption, updates tests and documentation accordingly, and adds a CLI entry point to the package.
Features0.1
No release notes were provided for version 0.1, so the specific changes, API impact, and fixes cannot be determined from the publisher-provided information. Developers should review the actual tagged code diff for this release to identify potential breaking changes or behavioral updates.