vk-rv / pvx Goto Github PK

Thank you for your work on implementing PASETO in Go.

I have a question about the stability of this project.

You state in the readme "API is not stabilized" and "status of this library is experimental".

This is of course fine and understandable. But how should this be interpreted ? Is it leaning more towards alpha or beta ?

Do you have any roadmap you are working to ? Or is it simply a case of "unstable and experimental until its ready".

I'm only asking because your library seems to be the best option out there. o1egl/paseto is old and lib/paseto comes with bloat because its part of a larger package (shuLhan/share).

I find it inconvenient that encryption functions accept a Claims interface type, but the 1 interface method, Valid() error, is unused in those functions. It seems like it should accept any instead of Claims.

In order to use Paseto for my application I need cross-language interoperability. However the only two Paseto v4 implementations for Python enforce Algorithm Lucidity, meaning they currently cannot be easily used in conjunction with pvx, since it doesn't support Paserk.

So it would be great if pvx could support importing/exporting keys from/to Paserk :)

To be specific I'm talking about the local, public and secret PASERK types from this matrix.

Edit: This is now also recommended by the implementation guide.