# Joken for Authentication API

**URL:** <https://forum.elixirforum.com/t/joken-for-authentication-api/18509>\
**Category:** Questions\
**Tags:** authentication, jwt, joken\
**Created:** [December 5, 2018, 4:19pm UTC](https://forum.elixirforum.com/t/joken-for-authentication-api/18509 "2018-12-05T16:19:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![helicon](https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/helicon/32/12734_2.png) [@helicon](https://forum.elixirforum.com/u/helicon)\
**Post date:** [December 5, 2018, 4:19pm UTC](https://forum.elixirforum.com/t/joken-for-authentication-api/18509/1 "2018-12-05T16:19:30Z")

</div>

Hello!  
Who is using Joken? For what tasks? What are the pros and cons of it? Is it suitable for building authentication API?  
Last beta version of it is similar to main Guardian module. I understand that Guardian has more features. But it’s easier for me to implement tracking tokens myself than to use the GuardianDB in may way ([separated token schemes · Issue #100 · ueberauth/guardian\_db · GitHub](https://github.com/ueberauth/guardian_db/issues/100)).

---

<div class="post-metadata">

**Author:** ![easco](https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/easco/32/1250_2.png) [@easco](https://forum.elixirforum.com/u/easco)\
**Post date:** [December 5, 2018, 7:35pm UTC](https://forum.elixirforum.com/t/joken-for-authentication-api/18509/2 "2018-12-05T19:35:59Z")

</div>

I use Joken and JOSE. I use `Joken.verify!/1` to validate that an incoming JWT was signed with a valid signature. But that’s the only thing we use it for. We used to use Guardian to generate JWT tokens, but that is no longer a requirement.

---

<div class="post-metadata">

**Author:** ![mischov](https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/mischov/32/2489_2.png) [@mischov](https://forum.elixirforum.com/u/mischov)\
**Post date:** [December 5, 2018, 7:42pm UTC](https://forum.elixirforum.com/t/joken-for-authentication-api/18509/3 "2018-12-05T19:42:45Z")

</div>

One potentially worrying thing is that both Guardian and Joken depend on [JOSE](https://github.com/potatosalad/erlang-jose), which hasn’t been updated for a year and half and which has issues like [not building on OTP 21](https://github.com/potatosalad/erlang-jose/pull/55).