So @jmangelo is there any way to force that endpoint to return tokens with HS256 signatures? Because we are having this problem - our API’s is configured to use HS256 tokens, and our iOS client tries to get token from that new shiny endpoint, and the result is bad. So we either have to force iOS use the old /oauth/ro, or implement breaking changes to our API’s.
Side note, from UI point of view, that switch there tells nothing that selected algorithm is not going to be applied to your tokens, neither do the API docs, and a result comes as a surprise.
1 Like