Updated OIDC Algorithm Fallback

src/modules/DashboardOIDC.py

@@ -85,10 +85,15 @@ class DashboardOIDC:
 
             key = next(k for k in jwks["keys"] if k["kid"] == kid)
 
+            alg = key.get("alg") or headers.get("alg")
+            supported_algs = oidc_config.get("id_token_signing_alg_values_supported")
+            if supported_algs and alg not in supported_algs:
+                return False, f"Unsupported token signing algorithm: {alg}"
+
             payload = jwt.decode(
                 id_token,
                 key,
-                algorithms=[key["alg"]],
+                algorithms=[alg],
                 audience=provider_info.get('client_id'),
                 issuer=issuer,
                 access_token=access_token