MODX Community

ModJWT: Working with JSON Web Token (JWT) on MODx

Development
#1

Just developing JSON Web Token (JWT) extra for MODX. Please take a look at https://github.com/lokamaya/modJWT

Demo page: http://modx.lokamaya.com/index.php?id=2

Thanks
–zaenal

4 Likes
#2

JWT for MODX is very interesting. It might be worth checking this too, though apparently its not production ready yet.

2 Likes
#3

Although modJWT can be extended and used for session, but the main purpose of this extra is to provides basic mechanism for issuing or validating Token for restful API.

For example, if I have download files in different domain in the Cloud that need to be secured and protected, and I want to give access to MODx users in other server, this module serving this kind of stateless Token for security.

  • serverX-domainA: modx installation
  • serverY-domainB: videos, MP3s, documents, etc.

All files in serverY protected behind Auth-JWT mechanism, similar to Auth-Basic or Auth-Digest but using JWT.

To get those files, modJWT on serverX provides modx users a unique and one-time-use Token for each request to be able to login or pass Auth-JWT on serverY. The Token could be:

  • Stateless JSON Web Token, or
  • Stateful JSON Web Token
3 Likes
#4

The list of Auth-JWT for web server can be found on jwt.io website

1 Like
#5

Very cool. I was just about to start building JWT into a custom app :slight_smile:

2 Likes
#6

Hi, got to say your plugin rocks, it saved me lots of time, still missing one thing, where can I config the exp time for the token, I can see this in the code $this->config[‘expAge’] but im confused on where to set the expAge?

1 Like
#7

Just add expAge as a property when you call the jwtEncode-snippet.

[[!jwtEncode? &expAge=`3600`]]

or

$token = $modx->runSnippet('jwtEncode', array('expAge'=>'3600'));
2 Likes