Alma JWT is using ES256 and not RS256 algorithm

davezuckerman · davezuckerman · commit cd3d04304211 · 2026-04-21T12:21:02.000-07:00
diff --git a/app/controllers/concerns/alma_jwt_validator.rb b/app/controllers/concerns/alma_jwt_validator.rb
@@ -18,7 +18,7 @@ def jwk_set
 
   def decode_and_verify_jwt(token)
     options = {
-      algorithm: 'RS256',
+      algorithm: 'ES256',
       verify_expiration: true,
       verify_aud: false,
       verify_iss: true,
