JWT - Production-Grade JWT Authentication Library

CyberGo JWT is a high-performance JWT authentication library for Go, providing a complete solution for token generation, validation, refresh, and revocation.

Features

• Multi-Algorithm Support — HMAC (HS256/384/512), RSA (RS256/384/512), RSA-PSS (PS256/384/512), ECDSA (ES256/384/512)
• Token Lifecycle — Create, validate, refresh, and revoke in one place
• Custom Claims — Support arbitrary business fields via CustomClaims interface
• Blacklist Management — Built-in memory store, supports custom backends like Redis
• Rate Limiting — Token bucket algorithm to prevent brute-force attacks
• Input Validation — Field length limits, injection pattern detection, control character filtering
• Clock Injection — ClockProvider interface for testing scenarios
• Concurrency Safe — All exported methods can be called concurrently
• Zero Sensitive Data Leakage — Close() securely clears keys

Installation

go get github.com/cybergodev/jwt

Quick Start

package main

import (
	"fmt"

	"github.com/cybergodev/jwt"
)

func main() {
	// 1. Create config
	cfg := jwt.DefaultConfig()
	cfg.SecretKey = "hmac-key-that-has-at-least-32-bytes!"

	// 2. Create Processor
	processor, err := jwt.New(cfg)
	if err != nil {
		panic(err)
	}
	defer processor.Close()

	// 3. Issue token
	claims := &jwt.Claims{
		UserID:   "user123",
		Username: "alice",
		Role:     "admin",
	}
	token, err := processor.Create(claims)
	if err != nil {
		panic(err)
	}
	fmt.Println("Token:", token)

	// 4. Validate token
	parsed, err := processor.Parse(token)
	if err != nil {
		panic(err)
	}
	fmt.Println("UserID:", parsed.UserID)
}

Architecture Overview

┌────────────────────────────────────────────────┐
│                  Processor                      │
│  (implements TokenManager interface)            │
├────────────────────────────────────────────────┤
│  Create / Parse / Refresh / Revoke             │
│  CreateRefresh / ParseInto / RefreshInto       │
│  ParseUnverified / IsRevoked / IsClosed / Close│
├──────────────────┬─────────────────────────────┤
│  BlacklistManager│     RateLimiter              │
│  (optional)      │     (optional)               │
├──────────────────┴─────────────────────────────┤
│                Config                           │
│  SigningMethod / TTL / Blacklist / Limit       │
└────────────────────────────────────────────────┘

Next Steps

• Getting Started — Detailed installation and configuration guide
• Core Concepts — Processor, token model, Claims architecture
• Signing Algorithms — HMAC, RSA, ECDSA selection guide
• Token Refresh & Rotation — Two-tier tokens and rotation strategies
• Configuration — Security config and input validation
• Custom Claims — Define business fields
• API Reference — Complete API reference
• Basic Examples — HMAC, token pair, validation examples
• Web Server Integration — Auth middleware and RBAC in practice