self-signed-token | simple self-signed token

self-signed-token is a PHP library. self-signed-token has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

A simple self-signed token based on a secret string and expiration time. Expiration time and signature are saved as part of the token. The token is easy to check for token expiration time. It is also easy to verify its authenticity by signature. I use this token to simply check its expiration from the time it was created. And signature based authenticity. All this without queries to the database. Without saving the token itself somewhere else. You can check the token on Web Server level(by Nginx). For example, using the ngx_http_secure_link_module. I save the Token ID in the database, and the time of its creation. But I do not query the database if the token is not valid or expired. This is convenient for preventing flooding with requests, and as a simple but reliable protection against DDoS, is relatively. +EasySignedToken - simplified version of the token. Expiration time is not saved in token. Instead, the token creation time is saved. During validation, the token lifetime set in the configuration is used. In this case, you can change the token's lifetime after its creation.