Skip to content

Conversation

@fabionardelli
Copy link

@fabionardelli fabionardelli commented Nov 18, 2025

Proposed changes

Modified generateJwtToken method in /models/model_oauth_server.js to allow signing the JWT access token with RS256 (asymmetric) algorithm when set through config.oidc.jwt_algorithm attribute or IDM_OIDC_JWT_ALGORITHM env variable.
This allows for an easier integration with common OAuth 2.0 libraries such as Spring Security OAuth 2.0 Resource Server.

Closes #357

Types of changes

What types of changes does your code introduce to the project: Put an x in
the boxes that apply

  • Bugfix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality
    to not work as expected)

Checklist

Put an x in the boxes that apply. You can also fill these out after creating
the PR. If you're unsure about any of them, don't hesitate to ask. We're here to
help! This is simply a reminder of what we are going to look for before merging
your code.

  • I have read the
    CONTRIBUTING
    doc
  • I have signed the
    CLA
  • I have added tests that prove my fix is effective or that my feature
    works
  • I have added necessary documentation (if appropriate)
  • Any dependent changes have been merged and published in downstream
    modules

Modified generateJwtToken method in /models/model_oauth_server.js to allow signing the JWT token with RS256 (asymmetric) Algorithm when set through config or env variable.
@github-actions
Copy link
Contributor

github-actions bot commented Nov 18, 2025

CLA Assistant Lite bot All contributors have signed the CLA ✍️

@fabionardelli
Copy link
Author

I have read the CLA Document and I hereby sign the CLA

@fabionardelli
Copy link
Author

recheckcla

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

JWT access tokens cannot be signed with RS256 algorithm

1 participant