fix: allow all request object signing algs per default
This patch resolves an issue where RS256 would be the only allowed request object signing algorithm. The spec however mandates that all algorithms are allowed if the client does not explicitly set the request object signing algorithm.
@@ -314,9 +314,6 @@ func (c *Client) GetTokenEndpointAuthSigningAlgorithm() string {
}
func (c *Client) GetRequestObjectSigningAlgorithm() string {
- if c.RequestObjectSigningAlgorithm == "" {
- return "RS256"
- }
return c.RequestObjectSigningAlgorithm
}
