From d887d80e8108bf4143f7912cb14bf80e3e28a314 Mon Sep 17 00:00:00 2001 From: Monis Khan Date: Tue, 13 Feb 2024 13:45:53 -0500 Subject: [PATCH] Support all key algs with structured authn config Signed-off-by: Monis Khan Kubernetes-commit: b5e0068325da7aa5ca42a7d5ea6b0f012a519765 --- plugin/pkg/authenticator/token/oidc/oidc.go | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/plugin/pkg/authenticator/token/oidc/oidc.go b/plugin/pkg/authenticator/token/oidc/oidc.go index 26e6c7335..79ef5c920 100644 --- a/plugin/pkg/authenticator/token/oidc/oidc.go +++ b/plugin/pkg/authenticator/token/oidc/oidc.go @@ -204,8 +204,11 @@ func (a *Authenticator) Close() { a.cancel() } -// whitelist of signing algorithms to ensure users don't mistakenly pass something -// goofy. +func AllValidSigningAlgorithms() []string { + return sets.List(sets.KeySet(allowedSigningAlgs)) +} + +// allowlist of signing algorithms to ensure users don't mistakenly pass something goofy. var allowedSigningAlgs = map[string]bool{ oidc.RS256: true, oidc.RS384: true,