fix: allow all request object signing algs per default

This patch resolves an issue where RS256 would be the only allowed request object signing algorithm. The spec however mandates that all algorithms are allowed if the client does not explicitly set the request object signing algorithm.
ory · Nov 10, 2020 · 294c405 · 294c405
1 parent 3b177c1
commit 294c405
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/client/client.go b/client/client.go
@@ -314,9 +314,6 @@ func (c *Client) GetTokenEndpointAuthSigningAlgorithm() string {
 }
 
 func (c *Client) GetRequestObjectSigningAlgorithm() string {
-	if c.RequestObjectSigningAlgorithm == "" {
-		return "RS256"
-	}
 	return c.RequestObjectSigningAlgorithm
 }