mirror of
https://github.com/nais/wonderwall.git
synced 2026-08-18 02:26:14 +00:00
Client assertion signing is algorithm-agnostic, but the fixtures only produced RS256 keys, so nothing proved it. Covers RSA, ECDSA and Ed25519, including both RFC 9864 identifiers. Also drops a kty assignment that jwx ignores and that would have mislabelled non-RSA keys had it taken effect.