Strict on which signing algorithm that can be used.

rohe · rohe · commit b162bc5814d1 · 2020-03-16T10:08:03.000+01:00
diff --git a/src/oidcrp/__init__.py b/src/oidcrp/__init__.py
@@ -924,7 +924,9 @@ def backchannel_logout(client, request='', request_args=None):
     kwargs = {
         'aud': client.service_context.client_id,
         'iss': client.service_context.issuer,
-        'keyjar': client.service_context.keyjar
+        'keyjar': client.service_context.keyjar,
+        'allowed_sign_alg': client.service_context.registration_response.get(
+            "id_token_signed_response_alg", "RS256")
     }
 
     try:
