pub(crate) const JWT_ALG: &str = "ES256";Expand description
The one JWS algorithm this verifier accepts.
DPoP proofs in the wild are frequently ES256 – P-256 is one of the two
curves atproto signing keys use, and it is the curve jacquard-oauth’s
client mints (jacquard_oauth::dpop::build_dpop_proof refuses to build
with anything else). didbot-key’s secp256r1 module documents why this
workspace mints no P-256 signing key but does verify them: a key that
arrives from somewhere else is not ours to normalize, only to judge. The
same reasoning applies here.