GStars
    golang-jwt

    golang-jwt/jwt

    Go implementation of JSON Web Tokens (JWT).

    authentication
    security
    auth
    ed25519
    go
    golang
    jwt
    Go
    MIT
    9.3K stars
    457 forks
    9.3K GitHub watchers
    Updated Nov 5, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    No releases in the last 90 days; the most recent was 281 days ago, with 110 contributors on GitHub.

    Use Cases & Benefits

    • Implements JSON Web Tokens (JWT) in Go for creating, parsing, signing, and verifying tokens.
    • Ensures secure token handling with support for multiple signing algorithms and strict validation aligned with RFC 7519.
    • Use for building secure authentication systems in Go applications using bearer tokens.
    • Use for integrating custom signing methods or key management services like AWS KMS or Google Cloud KMS.
    • Use for debugging and validating JWT implementations with the included command line utility and examples.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    A go (or 'golang' for search engine friendliness) implementation of JSON Web Tokens.

    Starting with v4.0.0 this project adds Go module support, but maintains backward compatibility with older v3.x.y tags and upstream github.com/dgrijalva/jwt-go. See the MIGRATION_GUIDE.md for more information. Version v5.0.0 introduces major improvements to the validation of tokens, but is not entirely backward compatible.

    After the original author of the library suggested migrating the maintenance of jwt-go, a dedicated team of open source maintainers decided to clone the existing library into this repository. See dgrijalva/jwt-go#462 for a detailed discussion on this topic.

    SECURITY NOTICE: Some older versions of Go have a security issue in the crypto/elliptic. The recommendation is to upgrade to at least 1.15 See issue dgrijalva/jwt-go#216 for more detail.

    SECURITY NOTICE: It's important that you validate the alg presented is what you expect. This library attempts to make it easy to do the right thing by requiring key types to match the expected alg, but you should take the extra step to verify it in your usage. See the examples provided.

    Excerpt from the golang-jwt/jwt README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    457+17

    Open issues

    53+2

    Compared with peers in Authentication

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    View category →
    golang-jwt/jwt compared with Authentication repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    tailscale/tailscale38.9K+31175today
    fosrl/pangolin23.6K+218756 days ago
    flipped-aurora/gin-vue-admin25.1K+1075116 days ago
    golang-jwt/jwt9.3K—40281 days ago
    tinyauthapp/tinyauth8.5K—39today
    duolahypercho/codex-router4.0K—5252 days ago
    Category median23.6K+21875—
    Compare jwt with tailscale, pangolin, gin-vue-admin →

    Discover Repositories

    Search across tracked repositories by name or description