MOmooreds·Aug 5, 2020Submission
1 points · Open discussionpaseto-toolkit
jpaseto
Java2020–2020
paseto-toolkit / jpaseto
jpaseto
A library for creating and parsing Paseto in Java
4Distinct people
4Mentions
0Explicit recommenders
72GitHub stars
What to know before exploring
What it is
A library for creating and parsing Paseto in Java
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by week4 dated mentions
Observed mentions: 2020-02-18 10:45:43 UTC to 2020-08-05 14:16:43 UTC. Weeks start Monday, UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Feb 17 | 2020-02-17 00:00:00 UTC | 2020-02-24 00:00:00 UTC | 1 | 0 | 1 |
| Feb 24 | 2020-02-24 00:00:00 UTC | 2020-03-02 00:00:00 UTC | 0 | 0 | 0 |
| Mar 2 | 2020-03-02 00:00:00 UTC | 2020-03-09 00:00:00 UTC | 0 | 0 | 0 |
| Mar 9 | 2020-03-09 00:00:00 UTC | 2020-03-16 00:00:00 UTC | 0 | 0 | 0 |
| Mar 16 | 2020-03-16 00:00:00 UTC | 2020-03-23 00:00:00 UTC | 0 | 0 | 0 |
| Mar 23 | 2020-03-23 00:00:00 UTC | 2020-03-30 00:00:00 UTC | 0 | 0 | 0 |
| Mar 30 | 2020-03-30 00:00:00 UTC | 2020-04-06 00:00:00 UTC | 0 | 0 | 0 |
| Apr 6 | 2020-04-06 00:00:00 UTC | 2020-04-13 00:00:00 UTC | 0 | 0 | 0 |
| Apr 13 | 2020-04-13 00:00:00 UTC | 2020-04-20 00:00:00 UTC | 0 | 0 | 0 |
| Apr 20 | 2020-04-20 00:00:00 UTC | 2020-04-27 00:00:00 UTC | 0 | 0 | 0 |
| Apr 27 | 2020-04-27 00:00:00 UTC | 2020-05-04 00:00:00 UTC | 0 | 0 | 0 |
| May 4 | 2020-05-04 00:00:00 UTC | 2020-05-11 00:00:00 UTC | 0 | 0 | 0 |
| May 11 | 2020-05-11 00:00:00 UTC | 2020-05-18 00:00:00 UTC | 0 | 0 | 0 |
| May 18 | 2020-05-18 00:00:00 UTC | 2020-05-25 00:00:00 UTC | 0 | 0 | 0 |
| May 25 | 2020-05-25 00:00:00 UTC | 2020-06-01 00:00:00 UTC | 0 | 0 | 0 |
| Jun 1 | 2020-06-01 00:00:00 UTC | 2020-06-08 00:00:00 UTC | 0 | 0 | 0 |
| Jun 8 | 2020-06-08 00:00:00 UTC | 2020-06-15 00:00:00 UTC | 0 | 0 | 0 |
| Jun 15 | 2020-06-15 00:00:00 UTC | 2020-06-22 00:00:00 UTC | 0 | 0 | 0 |
| Jun 22 | 2020-06-22 00:00:00 UTC | 2020-06-29 00:00:00 UTC | 1 | 0 | 1 |
| Jun 29 | 2020-06-29 00:00:00 UTC | 2020-07-06 00:00:00 UTC | 0 | 0 | 0 |
| Jul 6 | 2020-07-06 00:00:00 UTC | 2020-07-13 00:00:00 UTC | 0 | 0 | 0 |
| Jul 13 | 2020-07-13 00:00:00 UTC | 2020-07-20 00:00:00 UTC | 0 | 0 | 0 |
| Jul 20 | 2020-07-20 00:00:00 UTC | 2020-07-27 00:00:00 UTC | 1 | 1 | 0 |
| Jul 27 | 2020-07-27 00:00:00 UTC | 2020-08-03 00:00:00 UTC | 0 | 0 | 0 |
| Aug 3 | 2020-08-03 00:00:00 UTC | 2020-08-10 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
4 sourcesI've been doing a similar thing recently. I found PASETO to be interesting ( https://paseto.io ), which is a lot like JWT but is simpler and more opinionated (e.g. there is no plaintext option; symmetric and asymmetric operations are cleanly separated; etc.). I especially enjoyed watching this video https://youtu.be/RijGNytjbOI
I still decided to go with JWT, since PASETO isn't yet standard and its software hasn't been around for long, but it definitely helped me understand more about the choice I was making. In particular, PASETO distinguishes between "local" tokens (producer and consumer can both use the same symmetric key) versus "public" tokens (producer and consumer can't use the same key, e.g. third party services run by different organisations; hence asymmetric keys are needed). PASETO encourages local tokens to be used when possib
Read the rest
le, since their keys can be shorter, they generate shorter tokens, they're faster to encrypt/decrypt, they're easier to rotate, etc.; public tokens are essentially a last resort when we must interact with a third party.
I was originally considering 'public' JWTs (i.e. asymmetric keys) for my use case, since we're using AWS API Gateway and that has the option to check the signatures of 'public' JWTs, and reject invalid ones before they ever hit my code. However, I eventually went with 'local' JWTs (i.e. symmetric keys), since the convenience of having AWS discard some tokens for us wasn't worth the (mostly logistical) overhead of using asymmetric keys.
My choice to use the JJWT library was also partly due to its recommendation by the JPaseto library ( https://github.com/paseto-toolkit/jpaseto ).
> Anyone got insights as to how mainstream Paseto is getting?
Okta's a pretty big name in authn/authz and their engineers recently published an open source PASETO implementation.
https://developer.okta.com/blog/2019/10/17/a-thorough-introd...
https://github.com/paseto-toolkit/jpaseto
In JWT is Awesome