mirror of
https://github.com/nais/wonderwall.git
synced 2026-08-19 19:16:14 +00:00
Trong Huu Nguyen
f3f76fccc8
The flag never described id_token verification. It assigns an algorithm to provider JWKS keys that omit "alg", which is a compatibility shim for providers such as Azure and ID-porten. BREAKING CHANGE: openid.id-token-signing-alg is now openid.jwks-fallback-alg. A config file with the old key fails to start. The old environment variable is ignored and the value falls back to RS256.