nodeSolidServer / nodeSolidServer/node-solid-server

Shall NSS use ES256 algorithm as default in replacement of RS256

Ouverte
#1,702 4 commentaires 0 réactions 1 personne assignée Voir sur GitHub

Personne n'a encore pris cette issue.

Langage dominant
JavaScript
Étoiles
1.8k
Forks
308
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

@mrkvon

Actually logging in with NSS account use the RS256 algorithm.

https://solidcommunity.net/.well-known/openid-configuration
{"issuer":"https://solidcommunity.net","jwks_uri":"https://solidcommunity.net/jwks","scopes_supported":["openid","offline_access"],"response_types_supported":["code","code token","code id_token","id_token code","id_token","id_token token","code id_token token","none"],"token_types_supported":["legacyPop","dpop"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","refresh_token","client_credentials"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"],"token_endpoint_auth_methods_supported":"client_secret_basic","token_endpoint_auth_signing_alg_values_supported":["RS256"],"display_values_supported":[],"claim_types_supported":["normal"],"claims_supported":[],"claims_parameter_supported":false,"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_request_uri_registration":false,"check_session_iframe":"https://solidcommunity.net/session","end_session_endpoint":"https://solidcommunity.net/logout","authorization_endpoint":"https://solidcommunity.net/authorize","token_endpoint":"https://solidcommunity.net/token","userinfo_endpoint":"https://solidcommunity.net/userinfo","registration_endpoint":"https://solidcommunity.net/register"}

With #1698 being resolved we can also login with CSS ans ESS account that are using ES256

  • is there a missing information in openId-configuration ? This is not displayed above
  • Are there any reason to move NSS to use ES256 in replacement of RS256 ?
{"authorization_endpoint":"https://solidweb.me/.oidc/auth","claims_parameter_supported":true,"claims_supported":["azp","sub","webid","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://solidweb.me/.oidc/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","client_credentials"],"id_token_signing_alg_values_supported":["ES256"],"issuer":"https://solidweb.me/","jwks_uri":"https://solidweb.me/.oidc/jwks","registration_endpoint":"https://solidweb.me/.oidc/reg","response_modes_supported":["form_post","fragment","query"],"response_types_supported":["code id_token","code","id_token","none"],"scopes_supported":["openid","profile","offline_access","webid"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_jwt","client_secret_post","private_key_jwt","none"],"token_endpoint_auth_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"token_endpoint":"https://solidweb.me/.oidc/token","request_object_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"request_parameter_supported":false,"request_uri_parameter_supported":true,"require_request_uri_registration":true,"introspection_endpoint":"https://solidweb.me/.oidc/token/introspection","introspection_endpoint_auth_methods_supported":["client_secret_basic","client_secret_jwt","client_secret_post","private_key_jwt","none"],"introspection_endpoint_auth_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"dpop_signing_alg_values_supported":["RS256","PS256","ES256","EdDSA"],"revocation_endpoint":"https://solidweb.me/.oidc/token/revocation","revocation_endpoint_auth_methods_supported":["client_secret_basic","client_secret_jwt","client_secret_post","private_key_jwt","none"],"revocation_endpoint_auth_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"claim_types_supported":["normal"]}

Guide de contribution

Ouvrir le guide de contribution

Par où commencer

  1. Lisez l'issue en entier, puis le guide de contribution du projet.
  2. Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
  3. Forkez le dépôt et travaillez sur une branche.
  4. Ouvrez une pull request qui référence le numéro de l'issue.

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.