fix(ndi): fix missing kid on JWS header

opengovsg · Oct 9, 2023 · 8c5c63e · 8c5c63e
1 parent bbfa1ca
commit 8c5c63e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/express/oidc/v2-ndi.js b/lib/express/oidc/v2-ndi.js
@@ -432,7 +432,7 @@ function config(app, { showLoginPage }) {
         const signedProtectedHeader = {
           alg: 'ES256',
           typ: 'JWT',
-          kid: signingKey.kid,
+          kid: aspSigningKey.kid,
         }
         const signedIdToken = await new jose.CompactSign(
           new TextEncoder().encode(JSON.stringify(idTokenClaims)),