PHPackages                             ravibpatel/jwt-session - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. ravibpatel/jwt-session

ActiveLibrary[Authentication & Authorization](/categories/authentication)

ravibpatel/jwt-session
======================

Easily replace your existing session based authentication with JWT token-based authentication.

v1.0.8(3y ago)66581MITPHPPHP >=7.1CI failing

Since Jun 8Pushed 3y ago1 watchersCompare

[ Source](https://github.com/ravibpatel/jwt-session)[ Packagist](https://packagist.org/packages/ravibpatel/jwt-session)[ Docs](https://github.com/ravibpatel/JWTSession)[ RSS](/packages/ravibpatel-jwt-session/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (9)Dependencies (1)Versions (10)Used By (0)

JWT-SESSION
===========

[](#jwt-session)

Easily replace your existing session based authentication with JWT token-based authentication.

Installation
============

[](#installation)

Use composer to manage your dependencies and download JWT-SESSION:

```
composer require ravibpatel/jwt-session
```

How to use
----------

[](#how-to-use)

Just create the "session.php" file with the following content.

```
require_once __DIR__ . "/vendor/autoload.php";

$JWTSession = new ravibpatel\JWTSession\JWTSession(20, "Your Secret Key");
$JWTSession->setSessionHandler();
```

Now just include "session.php" file instead of using session\_start() as shown below.

session\_start();

```
require_once __DIR__ . "/session.php";
```

Parameters accepted by JWTSession constructor
---------------------------------------------

[](#parameters-accepted-by-jwtsession-constructor)

### 1. Timeout : int

[](#1-timeout--int)

Session timeout in minutes.

### 2. Secret Key : string

[](#2-secret-key--string)

This will be used to sign your session cookie.

### 3. Expire on Browser Close : boolean

[](#3-expire-on-browser-close--boolean)

Set it to true if you want the session to expire when the user closes the browser otherwise set it to false. By default, it is set to false.

### 4. Cookie name : string

[](#4-cookie-name--string)

If you are running multiple websites using this library on same domain then it is a good idea to set this to something else to avoid session collision. By default, it is set to "AUTH\_BEARER".

### 5. Domain : string

[](#5-domain--string)

By default it will be set to $\_SERVER\["HTTP\_HOST"\]. You can set it manually to point to your domain. The session cookie will only work for Domain you set here.

Note
----

[](#note)

The JWT Token can't be tampered with, but it is readable. This library stores the JWT token into a cookie so it is recommended that you don't save sensitive data like passwords in it. Also, the cookie can store only 4093 bytes of data so you should not store lots of information in your session.

Motivation
----------

[](#motivation)

- [JSON Web Tokens (JWT) vs Sessions](https://float-middle.com/json-web-tokens-jwt-vs-sessions/)
- [byjg/jwt-session](https://github.com/byjg/jwt-session)

###  Health Score

31

—

LowBetter than 68% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity20

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity63

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~180 days

Recently: every ~13 days

Total

9

Last Release

1458d ago

PHP version history (2 changes)v1.0.0PHP >=5.4.0

v1.0.4PHP >=7.1

### Community

Maintainers

![](https://www.gravatar.com/avatar/d8bcb5f6f6a5b17776d76e220795f5e1f4eb208fee1784a5e3717f1ab514fe0d?d=identicon)[rbsoft](/maintainers/rbsoft)

---

Top Contributors

[![ravibpatel](https://avatars.githubusercontent.com/u/2221060?v=4)](https://github.com/ravibpatel "ravibpatel (9 commits)")

---

Tags

jwtAuthenticationtokensession save handler

### Embed Badge

![Health badge](/badges/ravibpatel-jwt-session/health.svg)

```
[![Health](https://phpackages.com/badges/ravibpatel-jwt-session/health.svg)](https://phpackages.com/packages/ravibpatel-jwt-session)
```

###  Alternatives

[admad/cakephp-jwt-auth

CakePHP plugin for authenticating using JSON Web Tokens

160680.3k8](/packages/admad-cakephp-jwt-auth)[bizley/jwt

JWT integration for Yii 2

67425.3k2](/packages/bizley-jwt)[tuupola/branca

Authenticated and encrypted API tokens using modern crypto.

52309.2k1](/packages/tuupola-branca)[dmkit/phalcon-jwt-auth

A simple JWT middleware for Phalcon Micro to handle stateless authentication

3541.5k](/packages/dmkit-phalcon-jwt-auth)[internacionalweb/cognito-token-verifier

This library verifies that the signature of the JWT is valid, comes from a desired application, and that the token has not been tampered with or expired.

102.1k](/packages/internacionalweb-cognito-token-verifier)[paulvl/jwt-guard

JWT Guard for Laravel 5.\*

1518.0k1](/packages/paulvl-jwt-guard)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)