secretOrPrivateKey size error on GitHub-created GitHub App secret key

[anna-safonov]

Bug Report

Current Behavior
Doing some development with octokit and probot which bring jsonwebtoken as a dependency. After updating octokit/auth-app to 4.0.8 which supports jsonwebtoken 9.0.1, I'm getting this error:

"secretOrPrivateKey has a minimum key size of 2048 bits for RS256"

The private key is generated by GitHub when the app is registered, and is more than 2048 bits.

Expected behavior/code
I expect not to get an error after version update.

Environment

Node version v16,
octokit/auth-app 4.0.8,
universal-github-app-jwt 1.1.1,
octokit-auth-probot 1.2.8,
probot 12.1.1

Log output:

Error: secretOrPrivateKey has a minimum key size of 2048 bits for RS256 at Object.sign (/app/node_modules/jsonwebtoken/sign.js:130:22) at getToken (/app/node_modules/universal-github-app-jwt/dist-src/get-token.js:3:25) at Object.githubAppJwt (/app/node_modules/universal-github-app-jwt/dist-src/index.js:14:25) at getAppAuthentication (/app/node_modules/@octokit/auth-app/dist-src/get-app-authentication.js:4:41) at hook (/app/node_modules/@octokit/auth-app/dist-src/hook.js:18:33)

[welcome]

Thanks for opening this issue. A contributor should be by to give feedback soon. In the meantime, please check out the contributing guidelines and explore other ways you can get involved.