Tim Möhlmann 5f7dd9aa3d

fix(oidc): ignore algorithm for legacy signer (#9148) ...

# Which Problems Are Solved

It was possible to set a diffent algorithm for the legacy signer. This
is not supported howerver and breaks the token endpoint.

# How the Problems Are Solved

Remove the OIDC.SigningKeyAlgorithm config option and hard-code RS256
for the legacy signer.

# Additional Changes

- none

# Additional Context

Only RS256 is supported by the legacy signer. It was mentioned in the
comment of the config not to use it and use the webkeys resource
instead.

- closes #9121

(cherry picked from commit db8d794794eba191d1b1f3a79ea5b4ec2c90a821)

2025-01-17 07:43:48 +01:00

..

assets

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

authz

perf(milestones): refactor (#8788)

2024-10-28 08:29:34 +00:00

call

fix: reset the call timestamp after a bulk trigger (#6080)

2023-07-07 08:15:05 +00:00

grpc

feat: v2 api add way to list authentication factors (#9065)

2025-01-02 13:14:49 +00:00

http

feat(oidc): use web keys for token signing and verification (#8449)

2024-08-23 14:43:46 +02:00

idp

fix(saml): provide option to get internal as default ACS (#8888)

2024-11-15 07:19:43 +01:00

info

fix: correct method and path for session api activity (#6880)

2023-11-22 12:12:23 +02:00

oidc

fix(oidc): ignore algorithm for legacy signer (#9148)

2025-01-17 07:43:48 +01:00

robots_txt

fix: introduce measures to avoid bots crawling and indexing activities (#5728)

2023-05-05 10:25:02 +02:00

saml

feat: add saml request to link to sessions (#9001)

2024-12-19 11:11:40 +00:00

service

fix(eventstore): tests

2020-11-26 09:19:14 +01:00

ui

fix(i18n): typo in Russian login description (#9100)

2025-01-17 07:43:30 +01:00

api.go

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00