Furthermore instead of a simple string list I would like to restrict the input to an enum of algos which the oidc library supports.

What happens if no signing algo is set? We should keep backwards compatibility in mind and use our current RS256 as the default value.

Empty list results in the old behaviour of RS256 according to github.com/coreos/go-oidc/[email protected]/oidc/verify.go:317

Furthermore, please run make generate on your changes and push the resulting change to the alpha docs.

Done

Furthermore instead of a simple string list I would like to restrict the input to an enum of algos which the oidc library supports.

I suspect the valid list of signatures to be the ones listed at github.com/go-jose/go-jose/[email protected]/shared.go:105. Instead of an enum, we could also just allow strings, and rely on the go-jose to return a reasonable error when provided with an invalid signature algorithm? This would make it easier to maintain in the future at least when the library adds support for additional signing algorithms. If however I must make an enum out of it, do you have a link to an example of how the project prefers them, since golang doesn't support enums natively?

// Signature algorithms
const (
	EdDSA = SignatureAlgorithm("EdDSA")
	HS256 = SignatureAlgorithm("HS256") // HMAC using SHA-256
	HS384 = SignatureAlgorithm("HS384") // HMAC using SHA-384
	HS512 = SignatureAlgorithm("HS512") // HMAC using SHA-512
	RS256 = SignatureAlgorithm("RS256") // RSASSA-PKCS-v1.5 using SHA-256
	RS384 = SignatureAlgorithm("RS384") // RSASSA-PKCS-v1.5 using SHA-384
	RS512 = SignatureAlgorithm("RS512") // RSASSA-PKCS-v1.5 using SHA-512
	ES256 = SignatureAlgorithm("ES256") // ECDSA using P-256 and SHA-256
	ES384 = SignatureAlgorithm("ES384") // ECDSA using P-384 and SHA-384
	ES512 = SignatureAlgorithm("ES512") // ECDSA using P-521 and SHA-512
	PS256 = SignatureAlgorithm("PS256") // RSASSA-PSS using SHA256 and MGF1-SHA256
	PS384 = SignatureAlgorithm("PS384") // RSASSA-PSS using SHA384 and MGF1-SHA384
	PS512 = SignatureAlgorithm("PS512") // RSASSA-PSS using SHA512 and MGF1-SHA512
)