OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Security & Custody

Paseto.js

Paseto.js is a JavaScript implementation of PASETO, a cryptographically verified token format for authentication and authorization workflows. Its documented low-level API constructs tokens using V1 or V2 protocol objects and suitable keys, with operations for local-token encryption and decryption and public-token signing and verification.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Paseto.js — OpenViST project profile in Security & Custody.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use it when a JavaScript application needs PASETO token operations and its developers can work with the documented low-level API, protocol versions and key objects.

Who it is for

  • JavaScript developers implementing bearer-token authentication or authorization.
  • Developers evaluating PASETO as an alternative token format to JWT.
  • Teams that need direct control over protocol objects and key handling.

Documented uses

  • Create PASETO tokens for use as bearer tokens.
  • Encrypt and decrypt local PASETO tokens.
  • Sign and verify public PASETO tokens.
  • Generate or provide key material for token processing.
Before you choose

Requirements & limits

  • The README identifies Node.js as the primary runtime and browser support as intended, not as a documented target with demonstrated support.
  • The high-level API for encoding and securing JSON objects is not yet implemented; the available interface is low-level.
  • V2 is recommended by the project when possible; V1 is presented for legacy or other constraints.
  • Local tokens are encrypted and authenticated; public tokens are signed and authenticated but not encrypted.
  • Messages and footers must be UTF-8 encoded. Binary data is recommended to be URL-safe Base64 encoded.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Install Paseto.js in a Node.js project

Add the library to a project before using its documented low-level token API.

Before you start

  • A Node.js project
  • npm or Yarn

Steps

  1. Run the command below or yarn add paseto.js.

    Documented command
    npm install paseto.js

  2. Load the package in JavaScript with const Paseto = require('paseto.js');.

  3. Choose a documented protocol object, such as new Paseto.V2(), and create or provide a suitable key before calling token methods.

Expected outcome

The package is added to the project and the documented low-level API can be referenced in code.

Guide limitations

  • The high-level API is not implemented in the README.
  • The README identifies Node.js as the primary runtime; browser support is described as intended.
  • Key handling and storage are outside the library’s scope.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
18 October 2026
Original website title
sjudson/paseto.js · Official homepage title · retained in its source language
How we review sourcesSuggest a correction