[GH-ISSUE #1524] Support ES256 OAUTH id_token_signing_alg_values_supported #952

Open
opened 2026-03-02 11:53:57 +03:00 by kerem · 0 comments
Owner

Originally created by @Srylax on GitHub (Jun 3, 2025).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/1524

Describe the Bug

When using an OAUTH provider with id_token_signing_alg_values_supported = ES256 the OAUTH callback fails with https://next-auth.js.org/errors#oauth_callback_error unexpected JWT alg received, expected RS256, got: ES256.

Please remove the RS256 (or only opt-in) and enable ES256 by default.

Steps to Reproduce

Configure custom OIDC provider (kanidm) and try to login

Expected Behaviour

ES256 signed tokens should be supported

Screenshots or Additional Context

No response

Device Details

No response

Exact Karakeep Version

0.24.1

Have you checked the troubleshooting guide?

  • I have checked the troubleshooting guide and I haven't found a solution to my problem
Originally created by @Srylax on GitHub (Jun 3, 2025). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/1524 ### Describe the Bug When using an OAUTH provider with id_token_signing_alg_values_supported = ES256 the OAUTH callback fails with `https://next-auth.js.org/errors#oauth_callback_error unexpected JWT alg received, expected RS256, got: ES256`. Please remove the `RS256` (or only opt-in) and enable ES256 by default. ### Steps to Reproduce Configure custom OIDC provider (kanidm) and try to login ### Expected Behaviour ES256 signed tokens should be supported ### Screenshots or Additional Context _No response_ ### Device Details _No response_ ### Exact Karakeep Version 0.24.1 ### Have you checked the troubleshooting guide? - [x] I have checked the troubleshooting guide and I haven't found a solution to my problem
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/karakeep#952
No description provided.