I had sent an email w/ this bug & a patch for it, but I'm creating this issue as well just in case the email got marked as spam. Sorry for the duplication.

Anyway, I was working on auth today and ran into an issue with the [propelauth worker sdk](https://docs.propelauth.com/reference/backend-apis/cloudflare-workers).

My understanding of the issue is as follows: After importing the key, celld constructs a `CryptoKey` using the algorithm object unchanged, resulting in the shape below. ``` { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" } ```

JOSE then tries to evaluate something like [`key.algorithm.hash.name`](http://key.algorithm.hash.name/), which ends up undefined. The first attempt was to just change the returned object slightly to ```

hash: { name: _hashName(algorithm.hash) } ```

However, JOSE also checks key.algorithm.modulusLength so I've added that field as well.

`publicExponent` was not needed for this fix, but according to my bot ([verified as well here](https://www.w3.org/TR/webcrypto/#dfn-RsaKeyAlgorithm)) Web Crypto defines an RSA `CryptoKey.algorithm` as a complete `RsaHashedKeyAlgorithm`:

``` { name, modulusLength, publicExponent, hash } ```

Here is a pretty minimal repro: https://gist.github.com/dleviminzi/d2d22292bd2bb5706a02b1b8e48b0476

I've attached a patch with a fix below.

[0001-Normalize-imported-RSA-CryptoKey-metadata.patch](https://github.com/user-attachments/files/31795237/0001-Normalize-imported-RSA-CryptoKey-metadata.patch)