diff --git a/server/oauth2.go b/server/oauth2.go
index b5d992ca..8c9494f5 100644
--- a/server/oauth2.go
+++ b/server/oauth2.go
@@ -187,7 +187,7 @@ func signPayload(key *jose.JSONWebKey, alg jose.SignatureAlgorithm, payload []by
 	return signature.CompactSerialize()
 }
 
-// The hash algorithm for the at_hash is detemrined by the signing
+// The hash algorithm for the at_hash is determined by the signing
 // algorithm used for the id_token. From the spec:
 //
 //    ...the hash algorithm used is the hash algorithm used in the alg Header