23 Sep
2015
23 Sep
'15
4:16 p.m.
Hi We want to add JWT support to our Dancer2 applications, and are looking for recommendations on what support libraries to use. We would like to ensure that someone is looking closely at possible security flaws. We saw https://metacpan.org/pod/Dancer2::Plugin::JWT which uses JSON::WebToken which has been around since Jan 2013 and has gone through a few revisions since then, latest being Mar 2015 Should we be looking at integrating: Crypt::JWT which has only seen a single release in Jul 2015. Documentation specifically mentions JWT, JWS and JWE and their related RFCs. Documentation claims that "The module implements all (100%) algorithms defined in https://tools.ietf.org/html/rfc7518 - JSON Web Algorithms (JWA)." Thanks Rick