Authentication for the blockchain era.

Ethereum web tokens (EWTs) are JSON web tokens that are signed using a Web3 provider. This enables authentication using an Ethereum address. Some use cases include:

• Permissioned ERC721 metadata
• Restricting API access to certain Ethereum addresses
• Proving ownership of an Ethereum address
• Basically anything auth related!

EWTs are just JWTs with a few additional constraints:

• The alg is set to ETH.
• An address field must be included in the payload.
• The signed payload is the base64url encoding of web3.sign(HEADER . payload)

The EWT standard is intentionally simple to make it easy to integrate into existing JWT-based systems and libraries.

The goal is to support all JWT features, especially claims. Pull requests are encouraged!

MIT