#paseto #token #authentication #jwt #platform-independent #crypto

no-std pasetors

PASETO: Platform-Agnostic Security Tokens (in Rust)

25 releases

0.7.0 Aug 28, 2024
0.6.8 Dec 12, 2023
0.6.7 Jun 10, 2023
0.6.6 Mar 4, 2023
0.1.0 Oct 12, 2020

#72 in Cryptography

Download history 34819/week @ 2024-07-27 31168/week @ 2024-08-03 33066/week @ 2024-08-10 32618/week @ 2024-08-17 31851/week @ 2024-08-24 33550/week @ 2024-08-31 36947/week @ 2024-09-07 34081/week @ 2024-09-14 37807/week @ 2024-09-21 39131/week @ 2024-09-28 40408/week @ 2024-10-05 40175/week @ 2024-10-12 41788/week @ 2024-10-19 40672/week @ 2024-10-26 39602/week @ 2024-11-02 39194/week @ 2024-11-09

167,852 downloads per month
Used in 74 crates (4 directly)

MIT license

235KB
5K SLoC

Tests Documentation Crates.io Safety Dance MSRV codecov

PASETOrs

"Paseto is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards."

PASETO (Platform-Agnostic SEcurity TOkens) are secure stateless tokens. Read more here and at PASETO.io.

This library includes:

  • Pure-Rust implementation of the Version 4, 3† and 2 protocol
  • PASERK support (limited amount of PASERK-types) with optional serde support as well
  • #![no_std] (with default-features disabled) and #![forbid(unsafe_code)]
  • WASM-friendly (wasm32-unknown-unknown using #![no_std])
  • Fuzzing targets
  • Test vectors
  • Usage examples

Only the public variant (v3.public) of version 3 is currently supported.

Usage

See usage examples here.

Security

This library has not undergone any third-party security audit. Usage is at own risk.

Minimum Supported Rust Version

Rust 1.80.0 or later is supported however, the majority of testing happens with latest stable Rust.

MSRV may be changed at any point and will not be considered a SemVer breaking change.

Changelog

Please refer to the CHANGELOG.md list.

License

pasetors is licensed under the MIT license. See the LICENSE file for more information.

Dependencies

~0.1–2.8MB
~52K SLoC