Comments (3)
There is one use case not considered: copy/pasting JWT. That's needed when JWT is generated on the web and human has to copy it to a local terminal, bootstrapping their client that talks to the server.
There could be another variation of the token so that compression wouldn't be part of the header. Compression probably doesn't have to be adaptive, since there's not much to choose from.
However, there is a challenge how to compress small-sized JSON into ASCII representation.
from jwt.
/cc @DASPRiD
from jwt.
After discussing this with @lcobucci, we came to the conclusion that compressing tokens is just not worth it. Specifically, for following reasons:
- when using JWT tokens in HTTP headers, HTTP2 already provides header compression
- token compression algorithm identifier would have to be stored in JWT headers, which makes most of the token non-compressible anyway
- tokens that are used as part of response bodies in HTTP requests/responses are already compressed by the user agent or the server
- tokens that are stored are unlikely stored as base64 encoded, as the JSON structure (and signature) makes it easy to convert the data into more optimized formats. For example, storing a JSONB object in a Postgres database can lead to amazing results
- tokens sent over the network can be re-coded into something else, if network impact and latency are relevant (for example, protobufs may be used)
Therefore, I'm closing this as "won't fix", as it really doesn't need a fix.
from jwt.
Related Issues (20)
- Uncaught Error: Class "Lcobucci\JWT\JwtFacade" not found HOT 1
- error Undefined method 'claims'. HOT 1
- Suggestion: Make Parser methods public HOT 6
- It was not possible to parse your key, reason: error:0480006C:PEM routines::no start line HOT 2
- Getting error * error:0906D06C:PEM routines:PEM_read_bio:no start line HOT 3
- Class "Lcobucci\JWT\Validation\Constraint\LooseValidAt" not found HOT 4
- Builder#withClaim() is meant to be used for non-registered claims, check the documentation on how to set claim \"sub\"" HOT 3
- Wrong timezone while parsing jet HOT 1
- Uncaught Error: Class "Lcobucci\JWT\JwtFacade" not found in version 5.1 HOT 2
- Impossible to parse private key HOT 2
- JWT token signature is not validated when parsing from configuration HOT 3
- Failed to parse token using the decoder key ECDSA with Sha384 HOT 4
- Class Lcobucci\JWT\Signer\Key\InMemory may not inherit from final class HOT 8
- Add claims() function to token interface HOT 4
- Remove UnifyAudience ClaimFormatter HOT 5
- It was not possible to parse your key, reason: error:1E08010C:DECODER routines::unsupported HOT 2
- No change to composer.json, but a composer update result in "Key provided is shorter than 256 bits, only 240 bits provided" error HOT 5
- Deprecated empty key HOT 2
- "Key cannot be empty" error HOT 6
- Broken upgrade path from 3.4 to 4.0 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from jwt.