OpenID 'id_token_signing_alg_values_supported' should be honored

Issue #379 invalid
Former user created an issue

Current implementation doesn't honor 'id_token_signing_alg_values_supported' in /.well-known/openid-configuration.

Currently, we have to hardcode the algorithm in source code to support any algorithms that's is not 'RS256'. However, the code would be broken if we change the signature algorithm from the hardcoded one.

proposal: to honor OpenID: 'id_token_signing_alg_values_supported'. The supported algorithms will be pulled from /.well-know/openid-configuration.

Comments (2)

  1. Log in to comment