Use github.com/lestrrat-go/jwx/v3 for all JWT operations.
Keeping with Minimize Dependencies, we exclusively use github.com/lestrrat-go/jwx/v3 for all JWT operations.
Pros#
- This library is focused, mature, and well-maintained.
- This library appears to have the capabilities that we need.
Cons#
- This can require additional work to refactor code to use preferred dependencies.
- Support for secp256k1 currently requires a build flag.
- New key types might not be supported.