fix: set alg in auth if not set by user

nsarrazin · nsarrazin · commit 6623d11fa70a · 2024-12-10T15:58:14.000Z
diff --git a/src/lib/server/auth.ts b/src/lib/server/auth.ts
@@ -115,9 +115,10 @@ async function getOIDCClient(settings: OIDCSettings): Promise<BaseClient> {
 
 	const alg_supported = issuer.metadata["id_token_signing_alg_values_supported"];
 
-	if (Array.isArray(alg_supported) && !alg_supported.includes("RS256")) {
+	if (Array.isArray(alg_supported)) {
 		client_config.id_token_signed_response_alg ??= alg_supported[0];
 	}
+
 	return new issuer.Client(client_config);
 }
 

Original file line number	Diff line number	Diff line change
`@@ -115,9 +115,10 @@ async function getOIDCClient(settings: OIDCSettings): Promise<BaseClient> {`
`115`	`115`
`116`	`116`	`const alg_supported = issuer.metadata["id_token_signing_alg_values_supported"];`
`117`	`117`
`118`		`- if (Array.isArray(alg_supported) && !alg_supported.includes("RS256")) {`
	`118`	`+ if (Array.isArray(alg_supported)) {`
`119`	`119`	`client_config.id_token_signed_response_alg ??= alg_supported[0];`
`120`	`120`	`}`
	`121`	`+`
`121`	`122`	`return new issuer.Client(client_config);`
`122`	`123`	`}`
`123`	`124`