Skip to content

v1.0.2

Choose a tag to compare

View all tags
@Zastinian Zastinian released this 10 Feb 02:58
· 15 commits to main since this release
v1.0.2
808a783

TECTO v1.0.2 — First Release

Transport Encrypted Compact Token Object (TECTO) is a secure, opaque token protocol designed as a modern alternative to JWTs. Unlike signed JWTs, TECTO tokens are fully encrypted using XChaCha20-Poly1305, ensuring that payload data remains private and tamper-proof.

Key Features

  • Truly Opaque: Payloads are encrypted, not just signed. Clients cannot read the token contents.
  • High Security:
    • Uses XChaCha20-Poly1305 (AEAD) for authenticated encryption.
    • Unique Nonces: Automatically generated 24-byte CSPRNG nonce for every token.
    • Timing-Safe: Constant-time key comparisons.
    • Entropy Enforcement: Validates secret keys for sufficient randomness.
  • Zero Runtime Dependencies: The package is bundled to be lightweight and dependency-free in production.
  • Flexible Key Management:
    • Built-in MemoryKeyStore for ephemeral setups.
    • KeyStoreAdapter Interface: Easily plug in Redis, PostgreSQL, MySQL, SQLite, or any other backend.
    • Built-in support for Key Rotation (keep old keys active while signing with new ones).
  • TypeScript First: Written in TypeScript with strict type definitions included.
    View changes on GitHub
Assets 2
Loading