Set proper JOSE algorithm for Ed25519 keys

maraino · maraino · commit b40cd46c1146 · 2024-06-18T15:44:23.000-07:00
This commit fixes a typo in the JOSE algorithm specified for Ed25519 keys when a kms is used. Fixes #1207
diff --git a/internal/cryptoutil/cryptoutil.go b/internal/cryptoutil/cryptoutil.go
@@ -135,7 +135,7 @@ func LoadJSONWebKey(kms, name string, opts ...jose.Option) (*jose.JSONWebKey, er
 	case *rsa.PublicKey:
 		jwk.Algorithm = jose.RS256
 	case ed25519.PublicKey:
-		jwk.Algorithm = jose.XEdDSA
+		jwk.Algorithm = jose.EdDSA
 	default:
 		return nil, fmt.Errorf("unsupported key type %T", pub)
 	}

Original file line number	Diff line number	Diff line change
`@@ -135,7 +135,7 @@ func LoadJSONWebKey(kms, name string, opts ...jose.Option) (*jose.JSONWebKey, er`
`135`	`135`	`case *rsa.PublicKey:`
`136`	`136`	`jwk.Algorithm = jose.RS256`
`137`	`137`	`case ed25519.PublicKey:`
`138`		`- jwk.Algorithm = jose.XEdDSA`
	`138`	`+ jwk.Algorithm = jose.EdDSA`
`139`	`139`	`default:`
`140`	`140`	`return nil, fmt.Errorf("unsupported key type %T", pub)`
`141`	`141`	`}`