From efc7ab87f912af4d1911fd47b3e64af3e69f527f Mon Sep 17 00:00:00 2001
From: Lee Chiang Fong <lee_chiang_fong@tech.gov.sg>
Date: Mon, 9 Oct 2023 18:16:44 +0800
Subject: [PATCH] fix(ndi): fix missing kid on JWS header

---
 lib/express/oidc/v2-ndi.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/express/oidc/v2-ndi.js b/lib/express/oidc/v2-ndi.js
index 2a6e58a5..4c2633b5 100644
--- a/lib/express/oidc/v2-ndi.js
+++ b/lib/express/oidc/v2-ndi.js
@@ -432,7 +432,7 @@ function config(app, { showLoginPage }) {
         const signedProtectedHeader = {
           alg: 'ES256',
           typ: 'JWT',
-          kid: signingKey.kid,
+          kid: aspSigningKey.kid,
         }
         const signedIdToken = await new jose.CompactSign(
           new TextEncoder().encode(JSON.stringify(idTokenClaims)),