auth0/go-jwt-middleware

Health v2 · maintenance only

Adoption not part of the score

1205 stars · 211 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Go middleware library by Auth0 that validates JSON Web Tokens (JWTs) on incoming HTTP requests, with a framework-agnostic core validator. Version 3 adds gRPC interceptors, functional-options configuration, and JWKS support via lestrrat-go/jwx.

Use cases

• protect Go HTTP API endpoints with JWT authentication
• validate bearer tokens in Go web requests
• add JWT auth middleware to net/http or gin apps
• verify JWTs from Auth0 in a Go backend
• authenticate gRPC services with JWT interceptors
• validate tokens against a JWKS endpoint in Go

When to choose

• you need JWT validation middleware for Go HTTP services
• you use Auth0 or another OIDC issuer and need token verification
• you want gRPC and HTTP JWT auth from one library

When to avoid

• you need to issue or sign JWTs rather than validate them
• you need full OAuth2/OIDC flows, not just token checking
• your stack is not Go

Facets

library · maturity active

middleware auth http-server rpc security web-development backend security apis developer-tools go cross-platform jwt authentication grpc jwks token-validation auth0 web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="auth0/go-jwt-middleware")