From da40383cf4c351610df0d5a944376cda7102047e Mon Sep 17 00:00:00 2001 From: Gusted Date: Sun, 17 Nov 2024 00:42:31 +0000 Subject: [PATCH] Revert defaulting to EdDSA - Apparently JWT actually checks when doing a JWT operation if the key type is valid and not on startup, this caused errors unfortunately. --- modules/setting/oauth2.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/setting/oauth2.go b/modules/setting/oauth2.go index c989460e5d..49288e2639 100644 --- a/modules/setting/oauth2.go +++ b/modules/setting/oauth2.go @@ -106,7 +106,7 @@ var OAuth2 = struct { AccessTokenExpirationTime: 3600, RefreshTokenExpirationTime: 730, InvalidateRefreshTokens: true, - JWTSigningAlgorithm: "EdDSA", + JWTSigningAlgorithm: "RS256", JWTSigningPrivateKeyFile: "jwt/private.pem", MaxTokenLength: math.MaxInt16, DefaultApplications: []string{"git-credential-oauth", "git-credential-manager", "tea"},