A modern programming language that makes developers happier.

kotlinlang

Any good suggestions for a light weight (many JWT libs depend on kotlin-reflect and/or jackson!) JWT lib that supports the `hs256` algorithm that Supabase uses?

I generally defer to nimbus for JWT stuff. No real reason - there are a few that seem to be ok (if a little Java'y in style).

I might be tempted to create a set of security interfaces for common operations like JWTVerifier and JWT signer, which we can shim into various libs.

it's a nice option indeed (<https://mvnrepository.com/artifact/com.nimbusds/nimbus-jose-jwt/10.3>) only optional compile dependencies and 0.7MB in size, and very well maintained.

I'll go with that then (actually I only need decoding/verifying, so I could roll my own and incur no 0.7MB dep load).

I was using 0auth's, but that uses jackson.

Ended up rolling my own. I need not lots of flexibility. Just parse Supabase's auth JWTs, and that's it.

i ended up with a thin kotlin facade (a few interfaces) over nimbus.