erlang error: {:not_supported, ["P-521", :HS512]} on 1.8.0 about erlang-jose

[kenips]

Thanks for explaining that. It's definitely a configuration error on our side which 1.8.0 helped exposing :).

[potatosalad]

Hey @kenips,

TL;DR HS512 should have never worked with an EC key of the P-521 curve. Due to the way it was previously written, a HS512 signature would actually cause ES512 to be used (which is valid for that key type).

Version 1.8.0 is more strict in regards to which algorithms may be used with specific key types. In previous versions, :sha512 would get passed to the EC key type, so it was actually "working silently" on past versions. However, HMAC-SHA-512 and SHA-512 are two very different algorithms, hence the "more strict" failure that is happening for you.

That said, I need to dig into guardian a little more and see why exactly HS512 is being passed in for an EC key. Would you mind sharing the configuration you are specifying for guardian (minus your secret key or just minus the "d" portion of the key)?