Error when using HS256

Author: Annyv2

00-Starter-Seed/server.py

@@ -80,6 +80,10 @@ def decorated(*args, **kwargs):
             return handle_error({"code": "invalid_header",
                                  "description": "Invalid header. "
                                                 "Use an RS256 signed JWT Access Token"}, 401)
+        if unverified_header["alg"] == "HS256":
+            return handle_error({"code": "invalid_header",
+                                 "description": "Invalid header. "
+                                                "Use an RS256 signed JWT Access Token"}, 401)
         rsa_key = {}
         for key in jwks["keys"]:
             if key["kid"] == unverified_header["kid"]: