oidc auth provider: don't trim issuer URL

This mirrors a similar side fix for the API server authenticator. Don't trim the issuer URL provided by the user since OpenID Connect mandates that this URL exactly matches the URL returned by the issuer during discovery. Not test updates since this is already tested by the go-oidc client package. See: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfigurationValidation

oidc auth provider: don't trim issuer URL
3d2ee4e7 · Eric Chiang · ff9980e2 · 3d2ee4e7
Commit 3d2ee4e7 authored Aug 18, 2016 by Eric Chiang
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

oidc.go plugin/pkg/client/auth/oidc/oidc.go +1 -1

No files found.
--- a/plugin/pkg/client/auth/oidc/oidc.go
+++ b/plugin/pkg/client/auth/oidc/oidc.go
@@ -97,7 +97,7 @@ func newOIDCAuthProvider(_ string, cfg map[string]string, persister restclient.A
 	}
 	hc := &http.Client{Transport: trans}

-	providerCfg, err := oidc.FetchProviderConfig(hc, strings.TrimSuffix(issuer, "/"))
+	providerCfg, err := oidc.FetchProviderConfig(hc, issuer)
 	if err != nil {
 		return nil, fmt.Errorf("error fetching provider config: %v", err)
 	}