While HS256 should remain the default signature when writing vault configs, HS384 and HS512 should be accepted when reading a vault config.
Currently, HS256 is hard coded and the algorithm header claim is ignored:
|
var verifier = JWT.require(Algorithm.HMAC256(rawKey)) // |