# did-jwt > Library for Signing and Verifying JWTs that use DIDs as issuers and JWEs that use DIDs as recipients Latest version **9.0.2** (published 2026-09-29) · Apache-2.0 license · 0 weekly downloads ## Install ```sh npm install did-jwt pnpm add did-jwt yarn add did-jwt bun add did-jwt ``` ## Health **Score 75/100 (B)** — status: active. Positive: has types; esm support; no vulnerabilities; has provenance; recently updated; high maintenance score; high quality score. Warnings: low downloads. ## Facts | | | |---|---| | Version | 9.0.2 | | Published | 2026-09-29 | | First published | 2018-03-20 | | Weekly downloads | 0 | | License | Apache-2.0 | | TypeScript types | bundled | | Module format | ESM + CommonJS | | Node | >=22.12 | | Dependencies | 7 | | Unpacked size | 787.5 KB | | Known vulnerabilities | 0 | | Install scripts | no | | Provenance | attested (GitHub Actions) | | GitHub stars | 373 | | Author | Pelle Braendgaard | | Maintainers | simonas-notcat, mirceanis, uport-automation-bot, pelleb, rmw2, mike.xu | ## Links - npm: https://www.npmjs.com/package/did-jwt - Repository: https://github.com/decentralized-identity/did-jwt - npm.io page: https://npm.io/package/did-jwt ## Dependencies (7) - [@scure/base](https://npm.io/package/@scure/base.md) ^2.4.0 - [uint8arrays](https://npm.io/package/uint8arrays.md) ^6.1.1 - [canonicalize](https://npm.io/package/canonicalize.md) ^5.0.0 - [did-resolver](https://npm.io/package/did-resolver.md) ^6.0.0 - [@noble/curves](https://npm.io/package/@noble/curves.md) ^2.4.0 - [@noble/hashes](https://npm.io/package/@noble/hashes.md) ^2.4.0 - [@noble/ciphers](https://npm.io/package/@noble/ciphers.md) ^2.4.0 ## Recent versions - 9.0.2 (latest) — 2026-09-29 - 9.0.0-alpha.1 (alpha) — 2025-01-16 - 1.0.0-dev.0 (dev) — 2019-07-29 - 9.0.1 — 2026-09-19 - 9.0.0 — 2026-09-19 - 8.0.18 — 2025-08-25 - 8.0.17 — 2025-06-06 - 8.0.16 — 2025-05-30 - 8.0.15 — 2025-05-14 - 8.0.14 — 2025-04-24 - 8.0.13 — 2025-04-23 - 8.0.12 — 2025-04-22 - 8.0.11 — 2025-04-15 - 8.0.10 — 2025-04-14 - 8.0.9 — 2025-03-19 - … 145 more at https://npm.io/package/did-jwt/versions ## README [![npm](https://img.shields.io/npm/dt/did-jwt.svg)](https://www.npmjs.com/package/did-jwt) [![npm](https://img.shields.io/npm/v/did-jwt.svg)](https://www.npmjs.com/package/did-jwt) [![Twitter Follow](https://img.shields.io/twitter/follow/veramolabs.svg?style=social&label=Follow)](https://twitter.com/veramolabs) [![codecov](https://codecov.io/gh/decentralized-identity/did-jwt/branch/master/graph/badge.svg)](https://codecov.io/gh/decentralized-identity/did-jwt) # did-jwt The did-JWT library allows you to sign and verify [JSON Web Tokens (JWT)](https://tools.ietf.org/html/rfc7519) using `ES256K`, `ES256`, and `EdDSA` algorithms. The non-standard `ES256K-R` is also supported for backward compatibility reasons, as well as the `Ed25519` legacy name for `EdDSA`. Public keys are resolved using the [Decentralized ID (DID)](https://w3c.github.io/did-core/#identifier) of the signing identity of the token, which is passed as the `iss` attribute of the JWT payload. ## DID methods All DID methods that can be resolved using the [`did-resolver`](https://github.com/decentralized-identity/did-resolver) interface are supported for verification. If your DID method requires a different signing algorithm than what is already supported, please create an issue. ## Installation ```bash npm install did-jwt ``` or if you use `yarn` or `pnpm`: ```bash yarn add did-jwt # or pnpm add did-jwt ``` ## Example ### 1. Create a did-JWT In practice, you must secure the key passed to `ES256KSigner`. The key provided in code below is for informational purposes only. ```ts import didJWT from 'did-jwt'; const signer = didJWT.ES256KSigner(didJWT.hexToBytes('278a5de700e29faae8e40e366ec5012b5ec63d36ec77e8a2417154cc1d25383f')) let jwt = await didJWT.createJWT( { aud: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', iat: undefined, name: 'uPort Developer' }, { issuer: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', signer }, { alg: 'ES256K' } ) console.log(jwt) ``` ### 2. Decode a did-JWT Try decoding the JWT. You can also do this using [jwt.io](https://jwt.io) ```js //pass the jwt from step 1 let decoded = didJWT.decodeJWT(jwt) console.log(decoded) ``` Once decoded, a did-JWT will resemble: ```ts expect(decoded).toEqual({ header: { alg: 'ES256K', typ: 'JWT' }, payload: { aud: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', name: 'uPort Developer', iss: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74' }, signature: 'mAhpAnw-9u57hyAaDufj2GPMbmuZyPDlU7aYSUMKk7P_9_cF3iLk-hFjFhb5xaUQB5nXYrciw6ZJ2RSAZI-IDQ', data: 'eyJhbGciOiJFUzI1NksiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJkaWQ6ZXRocjoweGYzYmVhYzMwYzQ5OGQ5ZTI2ODY1ZjM0ZmNhYTU3ZGJiOTM1YjBkNzQiLCJuYW1lIjoidVBvcnQgRGV2ZWxvcGVyIiwiaXNzIjoiZGlkOmV0aHI6MHhmM2JlYWMzMGM0OThkOWUyNjg2NWYzNGZjYWE1N2RiYjkzNWIwZDc0In0' }) ``` ### 3. Verify a did-JWT You need to provide a did-resolver for the verify function. For this example we will use `did:ethr`, but there are other methods available. For more information on configuring the Resolver object please see [did-resolver](https://github.com/decentralized-identity/did-resolver#configure-resolver-object) ```bash npm install ethr-did-resolver ``` ```js import {Resolver} from 'did-resolver'; import {getResolver} from 'ethr-did-resolver' let resolver = new Resolver({...getResolver({infuraProjectId: ''})}); // use the JWT from step 1 let verificationResponse = await didJWT.verifyJWT(jwt, { resolver, audience: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74' }) console.log(verificationResponse) ``` A verification response is an object resembling: ```typescript expect(verificationResponse).toEqual({ payload: { aud: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', name: 'uPort Developer', iss: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74' }, didResolutionResult: { didDocumentMetadata: {}, didResolutionMetadata: { contentType: 'application/did+ld+json' }, didDocument: { '@context': [ 'https://www.w3.org/ns/did/v1', 'https://w3id.org/security/suites/secp256k1recovery-2020/v2' ], id: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', verificationMethod: [ { id: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74#controller', type: 'EcdsaSecp256k1RecoveryMethod2020', controller: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', blockchainAccountId: 'eip155:1:0xF3beAC30C498D9E26865F34fCAa57dBB935b0D74' } ], authentication: [ 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74#controller' ], assertionMethod: [ 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74#controller' ] } }, issuer: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', signer: { id: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74#controller', type: 'EcdsaSecp256k1RecoveryMethod2020', controller: 'did:ethr:0xf3beac30c498d9e26865f34fcaa57dbb935b0d74', blockchainAccountId: 'eip155:1:0xF3beAC30C498D9E26865F34fCAa57dBB935b0D74' }, jwt: 'eyJhbGciOiJFUzI1NksiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJkaWQ6ZXRocjoweGYzYmVhYzMwYzQ5OGQ5ZTI2ODY1ZjM0ZmNhYTU3ZGJiOTM1YjBkNzQiLCJuYW1lIjoidVBvcnQgRGV2ZWxvcGVyIiwiaXNzIjoiZGlkOmV0aHI6MHhmM2JlYWMzMGM0OThkOWUyNjg2NWYzNGZjYWE1N2RiYjkzNWIwZDc0In0.mAhpAnw-9u57hyAaDufj2GPMbmuZyPDlU7aYSUMKk7P_9_cF3iLk-hFjFhb5xaUQB5nXYrciw6ZJ2RSAZI-IDQ', policies: {} }) ``` --- _Source: https://npm.io/package/did-jwt · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._