From 9a855f094dcf03f136fd9cfb0b14c6ad1943c7e2 Mon Sep 17 00:00:00 2001
From: Olivier 'reivilibre <olivier@librepush.net>
Date: Sun, 21 Apr 2024 18:08:09 +0100
Subject: [PATCH] Fix JWT header missing the typ and kid fields

Signed-off-by: Olivier 'reivilibre <olivier@librepush.net>
---
 src/web/oauth_openid/token.rs | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/web/oauth_openid/token.rs b/src/web/oauth_openid/token.rs
index a4d47c7..1a49a44 100644
--- a/src/web/oauth_openid/token.rs
+++ b/src/web/oauth_openid/token.rs
@@ -386,7 +386,12 @@ fn make_id_token(id_token: IdToken, secrets: &SecretConfig) -> eyre::Result<Stri
         bail!("ID Token not a map");
     };
 
-    let id_token_header = JwsHeader::new();
+    let mut id_token_header = JwsHeader::new();
+    id_token_header.set_token_type("JWT");
+    // The key ID is currently hardcoded as `thekey`; this is the same
+    // as on the JWKS endpoint.
+    id_token_header.set_key_id("thekey");
+
     let id_token_payload =
         JwtPayload::from_map(map).context("failed to make JWT payload for ID token")?;