diff --git a/go.mod b/go.mod
index d3bea2e..c06d9f8 100644
--- a/go.mod
+++ b/go.mod
@@ -9,6 +9,7 @@ require (
 	github.com/flosch/pongo2/v4 v4.0.2
 	github.com/gin-gonic/gin v1.7.4
 	github.com/go-playground/validator/v10 v10.9.0 // indirect
+	github.com/golang-jwt/jwt/v4 v4.4.2
 	github.com/golang/protobuf v1.5.2 // indirect
 	github.com/google/uuid v1.2.0
 	github.com/imdario/mergo v0.3.11 // indirect
diff --git a/go.sum b/go.sum
index be2919c..42582cd 100644
--- a/go.sum
+++ b/go.sum
@@ -72,6 +72,8 @@ github.com/gofrs/uuid v4.0.0+incompatible h1:1SD/1F5pU8p29ybwgQSwpQk+mwdRrXCYuPh
 github.com/gofrs/uuid v4.0.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
+github.com/golang-jwt/jwt/v4 v4.4.2 h1:rcc4lwaZgFMCZ5jxF9ABolDcIHdBytAFgqFPbSJQAYs=
+github.com/golang-jwt/jwt/v4 v4.4.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
diff --git a/modules/saml/account.go b/modules/saml/account.go
index fbc0c58..1cac6d9 100644
--- a/modules/saml/account.go
+++ b/modules/saml/account.go
@@ -7,10 +7,10 @@ import (
 
 	"github.com/crewjam/saml"
 	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v4"
 	"github.com/google/uuid"
 	"github.com/phuslu/log"
 	"go.sebtobie.de/httpserver/auth"
-	"gopkg.in/dgrijalva/jwt-go.v3"
 )
 
 var defaccount = &account{
diff --git a/modules/saml/funcs.go b/modules/saml/funcs.go
index f5b8324..8164b0a 100644
--- a/modules/saml/funcs.go
+++ b/modules/saml/funcs.go
@@ -9,8 +9,8 @@ import (
 	"os"
 
 	"github.com/crewjam/saml"
+	"github.com/golang-jwt/jwt/v4"
 	"github.com/phuslu/log"
-	"gopkg.in/dgrijalva/jwt-go.v3"
 )
 
 func initcert(file string, verify func(interface{}) bool) (key interface{}, err error) {
diff --git a/modules/saml/saml.go b/modules/saml/saml.go
index 8d75527..851dae0 100644
--- a/modules/saml/saml.go
+++ b/modules/saml/saml.go
@@ -14,10 +14,10 @@ import (
 	"github.com/crewjam/saml"
 	"github.com/crewjam/saml/samlsp"
 	"github.com/gin-gonic/gin"
+	"github.com/golang-jwt/jwt/v4"
 	"github.com/phuslu/log"
 	"go.sebtobie.de/httpserver"
 	"go.sebtobie.de/httpserver/auth"
-	"gopkg.in/dgrijalva/jwt-go.v3"
 )
 
 func musturi(url *url.URL, err error) *url.URL {