refactor!: default dPoPSigningAlgValues changed

BREAKING CHANGE: Default allowed DPoP signing algorithms are now just ES256 and EdDSA. RSA algorithms not allowed by default. This can be reverted using the `enabledJWA.dPoPSigningAlgValues` configuration option.
panva · Dec 1, 2022 · 9859969 · 9859969
1 parent d41bb0f
commit 9859969
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 3 deletions.
diff --git a/docs/README.md b/docs/README.md
@@ -3107,8 +3107,6 @@ JWS "alg" Algorithm values the provider supports to verify signed DPoP proof JWT
 _**default value**_:
 ```js
 [
-  'RS256',
-  'PS256',
   'ES256',
   'EdDSA'
 ]

diff --git a/lib/helpers/defaults.js b/lib/helpers/defaults.js
@@ -2663,7 +2663,7 @@ function makeDefaults() {
        * ```
        */
       dPoPSigningAlgValues: [
-        'RS256', 'PS256', 'ES256', 'EdDSA',
+        'ES256', 'EdDSA',
       ],
     },
   };