Merge pull request #3533 from Infisical/doc/add-mention-of-pkce-and-eddsa-alg

doc: add mentions of PKCE and eddsa alg for oidc

docs/documentation/platform/sso/auth0-oidc.mdx

@@ -45,6 +45,10 @@ description: "Learn how to configure Auth0 OIDC for Infisical SSO."
       3.2. For configuration type, select **Discovery URL**. Then, set **Discovery Document URL**, **JWT Signature Algorithm**, **Client ID**, and **Client Secret** from step 2.1 and 2.2.
       ![OIDC auth0 paste values into Infisical](../../../images/sso/auth0-oidc/org-update-oidc.png)
 
+      <Info>
+         Currently, the following JWT signature algorithms are supported: RS256, RS512, HS256, and EdDSA
+      </Info>
+
       Once you've done that, press **Update** to complete the required configuration.
 
    </Step>

docs/documentation/platform/sso/general-oidc.mdx

@@ -44,7 +44,9 @@ Prerequisites:
       To configure OIDC via the custom endpoints, set the **Configuration Type** field to **Custom** and input the required endpoint fields.
       ![OIDC general custom config](../../../images/sso/general-oidc/custom-oidc-form.png)
 
-      2.3. Optionally, you can define a whitelist of allowed email domains.
+      2.3. Select the appropriate JWT signature algorithm for your IdP. Currently, the supported options are RS256, RS512, HS256, and EdDSA.
+
+      2.4. Optionally, you can define a whitelist of allowed email domains.
 
       Finally, fill out the **Client ID** and **Client Secret** fields and press **Update** to complete the required configuration.
 

docs/documentation/platform/sso/keycloak-oidc/overview.mdx

@@ -72,6 +72,10 @@ description: "Learn how to configure Keycloak OIDC for Infisical SSO."
         3.2. For configuration type, select Discovery URL. Then, set the appropriate values for **Discovery Document URL**, **JWT Signature Algorithm**, **Client ID**, and **Client Secret**.
         ![OIDC keycloak paste values into Infisical](/images/sso/keycloak-oidc/create-oidc.png)
 
+        <Info>
+            Currently, the following JWT signature algorithms are supported: RS256, RS512, HS256, and EdDSA
+        </Info>
+
         Once you've done that, press **Update** to complete the required configuration.
 
     </Step>

docs/documentation/platform/sso/overview.mdx

@@ -35,6 +35,10 @@ Infisical supports these and many other identity providers:
 
 If your required identity provider is not shown in the list above, please reach out to [[email protected]](mailto:[email protected]) for assistance.
 
+<Info>
+  For enhanced security, Infisical enforces PKCE (Proof Key for Code Exchange) with the OAuth 2.0-based SSO providers and OIDC. This provides additional protection against authorization code interception attacks and strengthens your authentication flow security.
+</Info>
+
 ## FAQ
 
 <AccordionGroup>