Joken

Encodes and decodes JSON Web Tokens.

Currently supports the following algorithms:

• HS256
• HS384
• HS512

Currently validates the following:

• Signature
• Expiration (exp)
• Not Before (nbf)
• Audience (aud)
• Issuer (iss)
• Subject (sub)
• Issued At (iat)

Usage:

Looks for a joken config with secret_key, algorithm, json_module. Json module being a module that implements the Joken.Codec Behaviour

  defmodule My.Json.Module do
    alias Poison, as: JSON
    @behaviour Joken.Json

    def encode(map) do
      JSON.encode!(map)
    end

    def decode(binary) do
      JSON.decode!(binary, keys: :atoms!)
    end
  end

     config :joken
       secret_key: "test",
       json_module: My.Json.Module,
       algorithm: :HS256, #Optional. defaults to :HS256

then to encode and decode

{:ok, token} = Joken.encode(%{username: "johndoe"})

{:ok, decoded_payload} = Joken.decode(jwt)