Merge pull request #22561 from sennyeya/auth-scopes

fix(auth): Support additional scopes in the JWKS config

.changeset/dirty-cheetahs-shave.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Support additional algorithms in the `/.well-known/openid-configuration` endpoint.

plugins/auth-backend/src/identity/router.ts

@@ -34,7 +34,18 @@ export function createOidcRouter(options: Options) {
     jwks_uri: `${baseUrl}/.well-known/jwks.json`,
     response_types_supported: ['id_token'],
     subject_types_supported: ['public'],
-    id_token_signing_alg_values_supported: ['RS256'],
+    id_token_signing_alg_values_supported: [
+      'RS256',
+      'RS384',
+      'RS512',
+      'ES256',
+      'ES384',
+      'ES512',
+      'PS256',
+      'PS384',
+      'PS512',
+      'EdDSA',
+    ],
     scopes_supported: ['openid'],
     token_endpoint_auth_methods_supported: [],
     claims_supported: ['sub'],