Bug description
The default supported ID token encryption algorithms (OAuth 2 Provider settings > OpenID Connect) does not list any of the ECDH-ES algorithms, but we do actually support these since the secrets API work. This means that the OIDC discovery document will not list support for these algorithms by default.
How to reproduce the issue
Look at the default supported encryption algorithms
Expected behaviour
Should list:
- RSA1_5, RSA-OAEP, RSA-OAEP-256
- dir, A128KW, A192KW, A256KW
- ECDH-ES, ECDH-ES+A128KW, ECDH-ES+A192KW, ECDH-ES+A256KW
Current behaviour
- RSA1_5, RSA-OAEP, RSA-OAEP-256
- dir, A128KW, A192KW, A256KW
Work around
Manually add the ECDH algorithms to the list.
Code analysis
Config update required
- is documented by
-
OPENAM-15151 OIDC encryption documentation is missing ECDH-ES support
-
- Resolved
-