pow-auth / assent

Multi-provider framework in Elixir
https://powauth.com
MIT License
391 stars 45 forks source link

Refactor handling of OIDC and fix issue with alg validation #59

Closed danschultzer closed 3 years ago

danschultzer commented 3 years ago

With #58 it was evident that something was wrong in the validation step for alg. This resolves it so now the configuration option has :id_token_signed_response_alg to specific for alg should be used.

I've also made a bunch of refactor for the tests to make it easier to read and understand.