Skip to content

[v1.6.7] Registered JWS algorithms like EdDSAAlgorithm are "unsupported" on authlib.jose.jwt operations #859

New issue
New issue
Open
Open
[v1.6.7] Registered JWS algorithms like EdDSAAlgorithm are "unsupported" on authlib.jose.jwt operations#859
@danielfbnunes

Description

@danielfbnunes
danielfbnunes
opened on Feb 12, 2026

On v1.6.7, any operations using authlib.jose.jwt like

authlib/authlib/oauth2/rfc7523/assertion.py

Line 47 in a9e4cfe

return jwt.encode(header, payload, import_any_key(key))

are ignoring the registered JWS algorithms that are not in the default list

authlib/authlib/jose/__init__.py

Lines 51 to 62 in b87c32e

"HS256",
"HS384",
"HS512",
"RS256",
"RS384",
"RS512",
"ES256",
"ES384",
"ES512",
"PS256",
"PS384",
"PS512",

Previously, the registered algorithms were considered

authlib/authlib/jose/__init__.py

Line 49 in 5602965

jwt = JsonWebToken(list(JsonWebSignature.ALGORITHMS_REGISTRY.keys()))

What should be the approach from now on for algorithms outside of the default list?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions