Merge pull request #36 from meiling-gatekeeper/staging

0.8.4 Release
meili-NG · Feb 13, 2022 · 3d8276b · 3d8276b
2 parents 9a26ab9 + 031e1f9
commit 3d8276b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "meiling",
-  "version": "0.8.3",
+  "version": "0.8.4",
   "description": "An easy-to-use, open-source, flexible oAuth2 Authentication Provider and OpenID Connect Server",
   "main": "dist/",
   "repository": "https://github.com/meiling-gatekeeper/meiling",

diff --git a/src/routes/v1/oauth2/tokeninfo/id_token.ts b/src/routes/v1/oauth2/tokeninfo/id_token.ts
@@ -14,8 +14,14 @@ export async function idTokenInfoHandler(token: string, rep: FastifyReply): Prom
             }
           : config.openid.jwt.publicKey.key;
 
+      let algorithm = config.openid.jwt.algorithm as JWT.Algorithm;
+      if ((algorithm as string) === 'ES256K') {
+        algorithm = 'ES256';
+      }
+
       const result = JWT.verify(token, key, {
         issuer: config.openid.issuingAuthority,
+        algorithms: [algorithm],
       }) as any;
 
       if (new Date(result.exp).getTime() < new Date().getTime()) {