diff --git a/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java b/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java
index 00447b4..effc513 100644
--- a/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java
+++ b/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java
@@ -9,6 +9,7 @@
 import org.springframework.context.annotation.Configuration;
 import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity;
 import org.springframework.security.config.web.server.ServerHttpSecurity;
+import org.springframework.security.oauth2.jose.jws.MacAlgorithm;
 import org.springframework.security.oauth2.jwt.NimbusReactiveJwtDecoder;
 import org.springframework.security.oauth2.jwt.ReactiveJwtDecoder;
 import org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter;
@@ -39,12 +40,15 @@ public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http, Ga
     }
 
     @Bean
-    public ReactiveJwtDecoder reactiveJwtDecoder(@Value("${jwt.secret}") String secret){
+    public ReactiveJwtDecoder reactiveJwtDecoder(@Value("${jwt.secret}") String secret) {
         SecretKey secretKey = new SecretKeySpec(
                 secret.getBytes(StandardCharsets.UTF_8),
                 "HmacSHA256"
         );
-        return NimbusReactiveJwtDecoder.withSecretKey(secretKey).build();
+
+        return NimbusReactiveJwtDecoder.withSecretKey(secretKey)
+                .macAlgorithm(MacAlgorithm.HS256)
+                .build();
     }