From 3519b4302906db4a82fb4cdd2b9a0adf66ae19d5 Mon Sep 17 00:00:00 2001 From: Sehi55 Date: Fri, 1 May 2026 10:01:55 +0900 Subject: [PATCH] fix: specify algorithm --- .../gateway/infrastructure/config/SecurityConfig.java | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java b/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java index 00447b4..effc513 100644 --- a/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java +++ b/src/main/java/com/michelet/gateway/infrastructure/config/SecurityConfig.java @@ -9,6 +9,7 @@ import org.springframework.context.annotation.Configuration; import org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity; import org.springframework.security.config.web.server.ServerHttpSecurity; +import org.springframework.security.oauth2.jose.jws.MacAlgorithm; import org.springframework.security.oauth2.jwt.NimbusReactiveJwtDecoder; import org.springframework.security.oauth2.jwt.ReactiveJwtDecoder; import org.springframework.security.oauth2.server.resource.authentication.ReactiveJwtAuthenticationConverter; @@ -39,12 +40,15 @@ public SecurityWebFilterChain securityWebFilterChain(ServerHttpSecurity http, Ga } @Bean - public ReactiveJwtDecoder reactiveJwtDecoder(@Value("${jwt.secret}") String secret){ + public ReactiveJwtDecoder reactiveJwtDecoder(@Value("${jwt.secret}") String secret) { SecretKey secretKey = new SecretKeySpec( secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256" ); - return NimbusReactiveJwtDecoder.withSecretKey(secretKey).build(); + + return NimbusReactiveJwtDecoder.withSecretKey(secretKey) + .macAlgorithm(MacAlgorithm.HS256) + .build(); }