build(deps): bump jsonwebtoken from 10.4.0 to 11.0.0 (#2199)

* build(deps): bump jsonwebtoken from 10.4.0 to 11.0.0

Bumps [jsonwebtoken](https://github.com/Keats/jsonwebtoken) from 10.4.0 to 11.0.0.
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.0.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(auth): use jsonwebtoken 11 KeyAlgorithm -> Algorithm conversion

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: SamTV12345 <40429738+samtv12345@users.noreply.github.com>

Author: dependabot[bot]

Cargo.lock

@@ -108,7 +108,7 @@ http = "1.3.1"
 hyper-tls = { version = "0.6.0" }
 id3 = "1.17.0"
 indexmap = "2"
-jsonwebtoken = { version = "10.4.0", features = ["rust_crypto"] }
+jsonwebtoken = { version = "11.0.0", features = ["rust_crypto"] }
 libsqlite3-sys = { version = "0.37.0", features = ["bundled"] }
 maud = { version = "*", features = ["axum", "axum-core"] }
 mime_guess = "2.0.5"

Cargo.toml

@@ -10,7 +10,7 @@ use common_infrastructure::error::ErrorSeverity::Warning;
 use common_infrastructure::error::{CustomError, CustomErrorInner};
 use common_infrastructure::http::get_async_sync_client;
 use common_infrastructure::runtime::ENVIRONMENT_SERVICE;
-use jsonwebtoken::jwk::{JwkSet, KeyAlgorithm};
+use jsonwebtoken::jwk::JwkSet;
 use jsonwebtoken::{Algorithm, DecodingKey, Validation, decode};
 use podfetch_domain::user::User;
 use serde_json::Value;
@@ -108,27 +108,6 @@ async fn handle_auth_internal(
     }
 }
 
-fn from_key_alg_into_alg(value: KeyAlgorithm) -> Algorithm {
-    match value {
-        KeyAlgorithm::RS256 => Algorithm::RS256,
-        KeyAlgorithm::RS384 => Algorithm::RS384,
-        KeyAlgorithm::RS512 => Algorithm::RS512,
-        KeyAlgorithm::ES256 => Algorithm::ES256,
-        KeyAlgorithm::ES384 => Algorithm::ES384,
-        KeyAlgorithm::PS256 => Algorithm::PS256,
-        KeyAlgorithm::PS384 => Algorithm::PS384,
-        KeyAlgorithm::PS512 => Algorithm::PS512,
-        KeyAlgorithm::HS256 => Algorithm::HS256,
-        KeyAlgorithm::HS384 => Algorithm::HS384,
-        KeyAlgorithm::HS512 => Algorithm::HS512,
-        KeyAlgorithm::EdDSA => Algorithm::EdDSA,
-        KeyAlgorithm::RSA1_5 => Algorithm::ES256,
-        KeyAlgorithm::RSA_OAEP => Algorithm::RS256,
-        KeyAlgorithm::RSA_OAEP_256 => Algorithm::RS256,
-        KeyAlgorithm::UNKNOWN_ALGORITHM => Algorithm::ES256,
-    }
-}
-
 impl AuthFilter {
     fn map_auth_error(error: AuthControllerError<CustomError>) -> CustomError {
         match error {
@@ -217,8 +196,18 @@ impl AuthFilter {
         }?;
 
         let key = DecodingKey::from_jwk(first_jwk).unwrap();
-        let alg = first_jwk.common.key_algorithm.unwrap();
-        let mut validation = Validation::new(from_key_alg_into_alg(alg));
+        let alg = match first_jwk
+            .common
+            .key_algorithm
+            .and_then(|alg| Algorithm::try_from(alg).ok())
+        {
+            Some(alg) => Ok(alg),
+            None => {
+                tracing::error!("JWK has no supported signing algorithm");
+                Err(CustomError::from(CustomErrorInner::Forbidden(Warning)))
+            }
+        }?;
+        let mut validation = Validation::new(alg);
         let mut aud_hashset = HashSet::new();
         aud_hashset.insert(
             environment