use rs256

2021-05-06 15:42:46 +02:00
1 changed files with 1 additions and 1 deletions
--- a/auth.py
+++ b/auth.py
@ -103,7 +103,7 @@ def generateToken(**args):
            # print("DEBUG: generateToken: add claim {} -> {}".format(claim[0], claim[1]))
            payload[claim[0]] = claim[1]

-        return jwt.encode(payload, JWT_SECRET)
+        return jwt.encode(payload, JWT_SECRET, algorithm='RS256')
    except NoUserException:
        print("ERROR: generateToken: no user found, login or application wrong")
        raise werkzeug.exceptions.Unauthorized()