fix(api-server): add required 'alg' option to JWT middleware (#4368)

Author: AmriteshKhare

src/plugins/api-server/backend/main.ts

@@ -100,6 +100,7 @@ export const backend = createBackend<BackendType, APIServerConfig>({
       if (config.authStrategy !== AuthStrategy.NONE) {
         return await jwt({
           secret: config.secret,
+          alg: 'HS256',
         })(ctx, next);
       }
       await next();