search

paragonie / paseto

Platform-Agnostic Security Tokens
https://paseto.io
Other
3.24k stars 108 forks source link

extract php implementation and specification from the repository #78

Closed Grummfy closed 3 years ago

Grummfy commented 6 years ago

Hello, I think for a readability of the project, it could be very helpfull to split the specification of paseto and the implementation in php. It allow people to see to evolution of the spec and the implemntation without any missmatch.

thanks

aidantwoods commented 6 years ago

This might be worth doing also because this repo has a stable release out, but the RFC document is still in draft (i.e. the RFC text probably shouldn't be considered "stable" until it is finalised). This would also help with organising things like issues and PRs which relate either to the spec or to the reference implementation (these would have separate repos in which to be opened).

If splitting this repo was desired, it might make sense to put the reference implementation, spec, and paseto-io as separate repos under a GitHub organisation dedicated to Paseto? Unfortunately the "paseto" GitHub username is already taken (so wouldn't be available for an organisation name), but obviously some variant would still do the job e.g. "pasetoproject" is available (but perhaps someone can be more creative than that). To give an example of this e.g. CommonMark has a spec and reference implementations which live in separate repos under https://github.com/commonmark/.

Equally having these repos under the current organisation does essentially the same job of grouping them together, it's just a question of specificity I suppose :)

peter-evans commented 6 years ago

I think this is a good idea. It might also be nice to have the official test vectors listed separately in a way that is language independent.

peter-evans commented 6 years ago

Just noticed that the official test vectors are listed at the end of the RFC.

paragonie-scott commented 4 years ago

As time goes on, the more I see this change as desirable. Consider it done when I have a moment to work on PASETO again (which will be soon).

paragonie-security commented 3 years ago

We will be moving the specification to a repository under https://github.com/paseto-standard as soon as #127 is complete.

paragonie-security commented 3 years ago

https://github.com/paseto-standard/paseto-spec

purificant commented 3 years ago

It's great to see spec in it's own repo. This means you can now include the spec in your library as a git submodule or subtree and get access to test vectors JSON.