Signature Algorithms are hard coded in OAuth2Util.java

[vihanga-liyanage]

Description:

identity-inbound-auth-oauth/components/org.wso2.carbon.identity.oauth/src/main/java/org/wso2/carbon/identity/oauth2/util/OAuth2Util.java

Line 1537 in ff3ca8b

public static JWSAlgorithm mapSignatureAlgorithmForJWSAlgorithm(String signatureAlgorithm) throws IdentityOAuth2Exception {

Signature algorithms used to sign JWT id tokens are hard coded in this method with an if-else clause. Somewhere down the line when we have to support a new algorithm, we'll have to add a patch to fix this. Instead, we can use the com.nimbusds.jose.JWSAlgorithm#parse method to parse algorithms.

Suggested Labels:
Type/Improvement

Suggested Assignees:
N/A

Affected Product Version:
All

OS, DB, other environment details and versions:
N/A

Steps to reproduce:
N/A

Related Issues:
N/A