MDL-77077 mod_lti: Fix JWT signature verify when alg missing from JWKS
commita6bd5ae245a2dcd20e43710b67d1e09994e0cfbe
authorJake Dallimore <jake@moodle.com>
Mon, 30 Jan 2023 02:20:05 +0000 (30 10:20 +0800)
committerJake Dallimore <jake@moodle.com>
Mon, 30 Jan 2023 08:44:58 +0000 (30 16:44 +0800)
treec2a795c7b7d0726a3fd39b1ff8312b8b732d3fc5
parent67bbf6c4160b1fb7de4e82df611c5b7dd2927782
MDL-77077 mod_lti: Fix JWT signature verify when alg missing from JWKS

Infer the algorithm, where necessary, using a combination of JWT
headers and known valid LTI algorithms.
mod/lti/classes/local/ltiopenid/jwks_helper.php
mod/lti/locallib.php
mod/lti/tests/local/ltiopenid/jwks_helper_test.php [new file with mode: 0644]