[dancer-users] JWT libraries

[Rick Leir]

Hi

We want to add JWT support to our Dancer2 applications, and are looking for
recommendations on what support libraries to use. We would like to ensure
that someone is looking closely at possible security flaws.
We saw
https://metacpan.org/pod/Dancer2::Plugin::JWT

which uses

JSON::WebToken


which has been around since Jan 2013 and has gone through a few revisions
since then, latest being Mar 2015


Should we be looking at integrating:

Crypt::JWT

which has only seen a single release in Jul 2015. Documentation
specifically mentions JWT, JWS and JWE and their related RFCs.
Documentation claims that "The module implements all (100%) algorithms
defined in https://tools.ietf.org/html/rfc7518 - JSON Web Algorithms (JWA)."

Thanks

Rick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.preshweb.co.uk/pipermail/dancer-users/attachments/20150923/4fb7964d/attachment.html>