nodeSolidServer / nodeSolidServer/node-solid-server
Shall NSS use ES256 algorithm as default in replacement of RS256
未關閉
還沒有人認領這個 Issue。
- 主要語言
- JavaScript
- 星號
- 1.8k
- 分支
- 308
- PR 合併指標
- 30 天內沒有已合併 PR
描述
@mrkvon
Actually logging in with NSS account use the RS256 algorithm.
https://solidcommunity.net/.well-known/openid-configuration
{"issuer":"https://solidcommunity.net","jwks_uri":"https://solidcommunity.net/jwks","scopes_supported":["openid","offline_access"],"response_types_supported":["code","code token","code id_token","id_token code","id_token","id_token token","code id_token token","none"],"token_types_supported":["legacyPop","dpop"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","refresh_token","client_credentials"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"],"token_endpoint_auth_methods_supported":"client_secret_basic","token_endpoint_auth_signing_alg_values_supported":["RS256"],"display_values_supported":[],"claim_types_supported":["normal"],"claims_supported":[],"claims_parameter_supported":false,"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_request_uri_registration":false,"check_session_iframe":"https://solidcommunity.net/session","end_session_endpoint":"https://solidcommunity.net/logout","authorization_endpoint":"https://solidcommunity.net/authorize","token_endpoint":"https://solidcommunity.net/token","userinfo_endpoint":"https://solidcommunity.net/userinfo","registration_endpoint":"https://solidcommunity.net/register"}
With #1698 being resolved we can also login with CSS ans ESS account that are using ES256
- is there a missing information in openId-configuration ? This is not displayed above
- Are there any reason to move NSS to use ES256 in replacement of RS256 ?
{"authorization_endpoint":"https://solidweb.me/.oidc/auth","claims_parameter_supported":true,"claims_supported":["azp","sub","webid","sid","auth_time","iss"],"code_challenge_methods_supported":["S256"],"end_session_endpoint":"https://solidweb.me/.oidc/session/end","grant_types_supported":["implicit","authorization_code","refresh_token","client_credentials"],"id_token_signing_alg_values_supported":["ES256"],"issuer":"https://solidweb.me/","jwks_uri":"https://solidweb.me/.oidc/jwks","registration_endpoint":"https://solidweb.me/.oidc/reg","response_modes_supported":["form_post","fragment","query"],"response_types_supported":["code id_token","code","id_token","none"],"scopes_supported":["openid","profile","offline_access","webid"],"subject_types_supported":["public"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_jwt","client_secret_post","private_key_jwt","none"],"token_endpoint_auth_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"token_endpoint":"https://solidweb.me/.oidc/token","request_object_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"request_parameter_supported":false,"request_uri_parameter_supported":true,"require_request_uri_registration":true,"introspection_endpoint":"https://solidweb.me/.oidc/token/introspection","introspection_endpoint_auth_methods_supported":["client_secret_basic","client_secret_jwt","client_secret_post","private_key_jwt","none"],"introspection_endpoint_auth_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"dpop_signing_alg_values_supported":["RS256","PS256","ES256","EdDSA"],"revocation_endpoint":"https://solidweb.me/.oidc/token/revocation","revocation_endpoint_auth_methods_supported":["client_secret_basic","client_secret_jwt","client_secret_post","private_key_jwt","none"],"revocation_endpoint_auth_signing_alg_values_supported":["HS256","RS256","PS256","ES256","EdDSA"],"claim_types_supported":["normal"]}
貢獻指南
從這裡開始
- 先讀完整個 Issue,再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫,在一個分支上完成修改。
- 送出 Pull Request,並在描述裡引用這個 Issue 編號。
評估
這個 Issue 還沒有評估資料。