fix: allow all request object signing algs per default

This patch resolves an issue where RS256 would be the only allowed request object signing algorithm. The spec however mandates that all algorithms are allowed if the client does not explicitly set the request object signing algorithm.
ory · Nov 17, 2020 · edc54c2 · edc54c2
1 parent 8ab9eff
commit edc54c2
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/client/client.go b/client/client.go
@@ -314,9 +314,6 @@ func (c *Client) GetTokenEndpointAuthSigningAlgorithm() string {
 }
 
 func (c *Client) GetRequestObjectSigningAlgorithm() string {
-	if c.RequestObjectSigningAlgorithm == "" {
-		return "RS256"
-	}
 	return c.RequestObjectSigningAlgorithm
 }