{"record":{"id":"3b740233c8abd789","repo":"ory/hydra","slug":"jwksx-available-algorithms-are-v-but-unknown","errorCode":null,"errorMessage":"jwksx: available algorithms are \"%+v\" but unknown algorithm was requested: \"%s\"","messagePattern":"jwksx: available algorithms are \"%\\+v\" but unknown algorithm was requested: \"(.+?)\"","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"oryx/jwksx/generator.go","lineNumber":127,"sourceCode":"\t\treturn key, errors.Wrapf(err, \"jwks: unable to generate key\")\n\tcase jose.EdDSA:\n\t\t_, key, err := ed25519.GenerateKey(rand.Reader)\n\t\treturn key, errors.Wrapf(err, \"jwks: unable to generate key\")\n\tcase jose.RS256, jose.RS384, jose.RS512, jose.PS256, jose.PS384, jose.PS512:\n\t\tkey, err := rsa.GenerateKey(rand.Reader, bits)\n\t\treturn key, errors.Wrapf(err, \"jwks: unable to generate key\")\n\tcase jose.HS256, jose.HS384, jose.HS512:\n\t\tif bits%8 != 0 {\n\t\t\treturn nil, errors.Errorf(`jwksx: key size must be a multiple of 8 for algorithm \"%s\" but got: %d`, alg, bits)\n\t\t}\n\n\t\tkey := make([]byte, bits/8)\n\t\tif _, err := io.ReadFull(rand.Reader, key); err != nil {\n\t\t\treturn nil, errors.Wrapf(err, \"jwks: unable to generate key\")\n\t\t}\n\t\treturn key, nil\n\tdefault:\n\t\treturn nil, errors.Errorf(`jwksx: available algorithms are \"%+v\" but unknown algorithm was requested: \"%s\"`, GenerateSigningKeysAvailableAlgorithms(), alg)\n\t}\n}\n","sourceCodeStart":109,"sourceCodeEnd":130,"githubUrl":"https://github.com/ory/hydra/blob/4174065ffb052799890f7480f5360a877a67ffc1/oryx/jwksx/generator.go#L109-L130","documentation":"Returned by jwksx generate when the requested signing algorithm is not in the handled set (ES256/384/512, EdDSA, RS*/PS*, HS*). The algorithm string in the key-generation request is unsupported — typically a typo or a JWE-only algorithm passed for signing.","triggerScenarios":"Thrown at oryx/jwksx/generator.go:127 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Use one of the supported algorithms listed in the error message","Check for typos in the configured algorithm name (e.g. RS25 6 vs RS256)","Ensure a signing algorithm, not an encryption algorithm, was requested"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4174065ffb052799890f7480f5360a877a67ffc1","analyzedAt":"2026-09-03T14:52:41.581Z","contentChangedAt":"2026-09-03T14:52:41.581Z","schemaVersion":2},"datasetVersion":"2026-09-10T17:17:09.494Z"}