[Bug] Authentication using OpenID Connect assumes alg element under the OpenID Keys URL to be required. It is optional per specs. about pulsar

[jchongtibco]

Here is the specification.

https://www.rfc-editor.org/rfc/rfc7517.txt#:~:text=4.4.%20%20%22alg%22%20(Algorithm)%20Parameter%0A%0A%20%20%20The,of%20this%20member%20is%20OPTIONAL

On another hand, that field is required on the “.well-known/openid-configuration” specification
(The code should probably pick it up from here instead)

[Specification] (https://openid.net/specs/openid-connect-discovery-1_0.html#:~:text=id_token_signing_alg_values_supported,supported%20but%20MUST)

Further information can be validated at
Microsoft Open ID endpoint: https://login.microsoftonline.com/common/v2.0/

             Microsoft JWT Keys endpoint: https://login.microsoftonline.com/common/discovery/v2.0/keys

[Technoboy-]

We have fixed this issue by #22421

[lhotari]

Duplicate of #22419 . The fix #22421 will be part of 3.0.5 and 3.2.3 releases.