Merge pull request #13 from santiagorodriguez96/sr--specify-jwt-decod…

…e-algorithm Add capability of specifying JWT decode algorithm
bdewater · Mar 1, 2024 · 9c0da5b · 9c0da5b
2 parents 31f3f67 + f8d60e9
commit 9c0da5b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/fido_metadata/client.rb b/lib/fido_metadata/client.rb
@@ -23,9 +23,9 @@ class UnverifiedSigningKeyError < DataIntegrityError; end
       File.read(File.join(__dir__, "..", "Root.cer"))
     )].freeze
 
-    def download_toc(uri, trusted_certs: FIDO_ROOT_CERTIFICATES)
+    def download_toc(uri, algorithms: ["RS256"], trusted_certs: FIDO_ROOT_CERTIFICATES)
       response = get(uri)
-      payload, _ = JWT.decode(response, nil, true, algorithms: ["RS256"]) do |headers|
+      payload, _ = JWT.decode(response, nil, true, algorithms: algorithms) do |headers|
         jwt_certificates = headers["x5c"].map do |encoded|
           OpenSSL::X509::Certificate.new(Base64.strict_decode64(encoded))
         end