Merge pull request #608 from cflee/missing-kid

fix(ndi): fix missing kid on JWS header
opengovsg · Oct 11, 2023 · 63aecf7 · 63aecf7
2 parents e2c4b68 + efc7ab8
commit 63aecf7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/express/oidc/v2-ndi.js b/lib/express/oidc/v2-ndi.js
@@ -465,7 +465,7 @@ function config(app, { showLoginPage }) {
         const signedProtectedHeader = {
           alg: 'ES256',
           typ: 'JWT',
-          kid: signingKey.kid,
+          kid: aspSigningKey.kid,
         }
         const signedIdToken = await new jose.CompactSign(
           new TextEncoder().encode(JSON.stringify(idTokenClaims)),