From 7a95321bd5cdb3ac0b43aa9d8e60357288c6be2e Mon Sep 17 00:00:00 2001
From: Jannis Mattheis <contact@jmattheis.de>
Date: Sat, 20 Jun 2026 15:13:15 +0200
Subject: [PATCH] fix: discover oidc signing algs

---
 api/oidc.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api/oidc.go b/api/oidc.go
index 91e2acf1e..d01b7a7c5 100644
--- a/api/oidc.go
+++ b/api/oidc.go
@@ -35,7 +35,11 @@ func NewOIDC(conf *config.Configuration, db *database.GormDatabase, userChangeNo
 	}
 	cookieHandler := httphelper.NewCookieHandler(cookieKey, cookieKey, cookieHandlerOpt...)
 
-	opts := []rp.Option{rp.WithCookieHandler(cookieHandler), rp.WithPKCE(cookieHandler)}
+	opts := []rp.Option{
+		rp.WithCookieHandler(cookieHandler),
+		rp.WithPKCE(cookieHandler),
+		rp.WithSigningAlgsFromDiscovery(),
+	}
 
 	provider, err := rp.NewRelyingPartyOIDC(
 		context.Background(),