From 426c18ad57a9b48e8cd5409acb1669ed8f213798 Mon Sep 17 00:00:00 2001
From: Bastian Wagner <bastian.wagner@softconcis.de>
Date: Wed, 15 Jul 2026 16:33:21 +0200
Subject: [PATCH] hashing

---
 apps/api/src/oidc/oidc-client.service.ts   | 1 +
 apps/api/src/oidc/oidc-provider.service.ts | 1 +
 2 files changed, 2 insertions(+)

diff --git a/apps/api/src/oidc/oidc-client.service.ts b/apps/api/src/oidc/oidc-client.service.ts
index 3b76174..55949bd 100644
--- a/apps/api/src/oidc/oidc-client.service.ts
+++ b/apps/api/src/oidc/oidc-client.service.ts
@@ -103,6 +103,7 @@ export class OidcClientService {
       grant_types: client.grantTypes,
       response_types: client.responseTypes,
       scope: client.scope,
+      id_token_signed_response_alg: 'ES256',
       token_endpoint_auth_method: client.tokenEndpointAuthMethod,
     };
 
diff --git a/apps/api/src/oidc/oidc-provider.service.ts b/apps/api/src/oidc/oidc-provider.service.ts
index dff6d97..3962c2c 100644
--- a/apps/api/src/oidc/oidc-provider.service.ts
+++ b/apps/api/src/oidc/oidc-provider.service.ts
@@ -145,6 +145,7 @@ export class OidcProviderService implements OnModuleInit {
       clientDefaults: {
         grant_types: ['authorization_code'],
         response_types: ['code'],
+        id_token_signed_response_alg: 'ES256',
         token_endpoint_auth_method: 'client_secret_basic',
       },
       claims: {