Any plans to implement claims verification and additional signature types? about jose-php

[nov]

I’m not seeing any value on claim verification. Basically, claim verification logic is application specific (e.g., OpenID Connnect ID Token, OAuth Access Token, Google Pay Token).

For additional algorithm, I’m open for pull requests. (It’ll require php-seclib update)

To be honest, I’m no longer using PHP. I’m a Rubyist. So I’m not focusing this library recently...

[lukos]

Good points. With regard to claims verification, some libraries have optional verifiers to make it easier to, e.g. confirm the token has not expired. I will look at a Proof Of Concept to see if it is easy enough to do and whether you are interested.

I will have another look at the ES encryption. I think it requires additional package but I found one earlier that is specifically for ECC.