Match the signing alg with id_key alg

Signed-off-by: David Mulder <[email protected]>
kanidm · Dec 7, 2023 · 366d5a3 · 366d5a3
1 parent ac46494
commit 366d5a3
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/crypto/tpm.rs b/src/crypto/tpm.rs
@@ -42,7 +42,10 @@ where
 
     fn update_header(&mut self, header: &mut ProtectedHeader) -> Result<(), JwtError> {
         // Update the alg to match.
-        header.alg = JwaAlg::ES256;
+        match self.id_key.alg() {
+            KeyAlgorithm::Ecdsa256 => header.alg = JwaAlg::ES256,
+            KeyAlgorithm::Rsa2048 => header.alg = JwaAlg::RS256,
+        }
 
         header.kid = Some(self.kid.clone());