fix: use correct keystore select method for paseto access tokens

panva · Jul 18, 2021 · ce394bc · ce394bc
1 parent 7371a84
commit ce394bc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/models/formats/paseto.js b/lib/models/formats/paseto.js
@@ -35,9 +35,9 @@ module.exports = (provider, { opaque }) => {
       }
     } else if (purpose === 'public') {
       if (version === 1) {
-        [key] = keystore.selectForVerify({ alg: 'PS384', kid });
+        [key] = keystore.selectForSign({ alg: 'PS384', kid });
       } else if (version === 2) {
-        [key] = keystore.selectForVerify({ alg: 'EdDSA', crv: 'Ed25519', kid });
+        [key] = keystore.selectForSign({ alg: 'EdDSA', crv: 'Ed25519', kid });
       }
       if (!key) {
         throw new Error('resolved Resource Server paseto configuration has no corresponding key in the provider\'s keystore');