[GitHub] syncope pull request #79: Exposed JWT signature algorithm in security.proper...

[ilgrosso]

Github user ilgrosso commented on a diff in the pull request:

    https://github.com/apache/syncope/pull/79#discussion_r198392214
  
    --- Diff: core/spring/src/main/resources/security.properties ---
    @@ -28,6 +28,9 @@ secretKey=${secretKey}
     jwsKey=${jwsKey}
     jwtIssuer=ApacheSyncope
     
    +# Algorthim used to create and authenticate access token
    +jwtSignAlgo=HS256
    --- End diff --
    
    Why `HS256` as default? It used to be `HS512`, no?


---