user_oidc icon indicating copy to clipboard operation
user_oidc copied to clipboard

Ignore keys using a P-521 curve

Open julien-nc opened this issue 1 year ago • 0 comments

php-jwt dropped support for P-521 curve. Parsing a keyset which contains a key using this curve will now fail. We could either wait for php-jwt to do something about that. We could also remove this key from the keyset we receive from the IdP.

This is an attempt to fix #823 by removing any key using a P-521 curve from the discovered keys.

The problem I see here is that maybe we are removing a key that we need to decode a token.

julien-nc avatar May 14 '24 08:05 julien-nc