-
Notifications
You must be signed in to change notification settings - Fork 147
Open
Description
I know this switch happened a long time ago but it's come up as a compatibility question with uvdsl/solid-oidc-client-browser#14
The OIDC Discovery Spec says
id_token_signing_alg_values_supported
REQUIRED. JSON array containing a list of the JWS signing algorithms (alg values) supported by the OP for the ID Token to encode the Claims in a JWT [JWT]. The algorithm RS256 MUST be included. ...
My understanding is that of V3, CSS only supports ES256.
The Solid-OIDC spec depends on parts of the OIDC Discovery Spec but not necessarily this part.
From what I can piece together
- V3 made the change and it was discussed on gitter somewhere https://solid.github.io/solid-oidc-tests/ #1181 (comment)
- The relevant commit doesn't seem to provide an explanation as it's mostly related to switching to V7 of node-oidc-provider c9ed90a#diff-d95fb8bd621a3d884290b9b516068821fbb2c4fb7fa9eebb899a59558ee9702d
Does anybody have a recollection of what the conversation on gitter was and why rs256 support was dropped?
Apologies if this is somewhere and my searching skills failed me...
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels