jwt-tiny

A lightweight, zero-dependency JWT (JSON Web Token) implementation for Node.js and modern browsers. Perfect for server-side authentication and data exchange.

Features

• 🔒 Zero dependencies
• 📦 Ultra-lightweight (minimal bundle size)
• ⚡ Pure JavaScript implementation
• 🔄 Supports both Node.js and browser environments
• 🛡️ Secure token generation and verification
• 📝 Simple and intuitive API

Installation

npm install jwt-tiny

Usage

import { JWT } from 'jwt-tiny'

// Initialize with your secret key
const secret = 'your-256-bit-secret'
const jwt = new JWT(secret)

// Create a payload with claims
const payload = {
  name: "John Doe",
  roles: ["admin"],
  iat: +new Date(), // issued at timestamp
  exp: +new Date() + (60 * 60 * 1000) // expires in 1 hour
}

// Create a JWT token
const token = jwt.create(payload)

// Verify and decode the token
const verifiedPayload = jwt.verifyJSON(token)
if (!verifiedPayload) {
  console.log('Invalid token')
} else if (verifiedPayload.exp < +new Date()) {
  console.log('Token has expired')
} else {
  console.log('Token is valid:', verifiedPayload)
}

API Reference

new JWT(secret)

Creates a new JWT instance with the provided secret key.

jwt.create(payload)

Generates a new JWT token from the provided payload.

jwt.verify(token)

Verifies and returns the decoded payload from a JWT token.

jwt.verifyJSON(token)

Verifies and returns the decoded payload as a JSON object.

Security Considerations

• Always use a strong, random secret key
• Keep your secret key secure and never expose it in client-side code
• Consider implementing token expiration (exp claim)
• Use HTTPS for token transmission

License

MIT