How to use ES384 JWT signing with Gitea

In app.ini, set e.g.

[oauth2]
JWT_SIGNING_ALGORITHM = ES384
JWT_SIGNING_PRIVATE_KEY_FILE = /var/lib/gitea/jwt/private.pem

Generate the key using this command (you might need to adjust the paths)

openssl genpkey -algorithm EC -pkcs8 -pkeyopt ec_paramgen_curve:P-384 -out gitea_data/jwt/private.pem