2 files changed, 13 insertions(+), 4 deletions(-)

M auth/oidc.go
M config/config.go

@@ 16,7 16,14 @@ import (
 )
 
 func NewProviderAndConfig() (*oidc.Provider, oauth2.Config, error) {
-	provider, err := oidc.NewProvider(context.Background(), "https://" + config.TixeConfig.OidcDomain)
+	var providerUrl string
+	if config.TixeConfig.OidcIssuerTrailingSlash {
+		providerUrl = "https://" + config.TixeConfig.OidcDomain + "/"
+	} else {
+		providerUrl = "https://" + config.TixeConfig.OidcDomain
+	}
+
+	provider, err := oidc.NewProvider(context.Background(), providerUrl)
 	if err != nil {
 		log.Printf("[tixe/auth] Failed to create new custom provider")
 		return nil, oauth2.Config{}, err

@@ 29,9 29,10 @@ type Config struct {
 
 	CookieSecret string
 
-	OidcDomain   string
-	OidcClientID string
-	OidcSecret   string
+	OidcDomain              string
+	OidcIssuerTrailingSlash bool
+	OidcClientID            string
+	OidcSecret              string
 	// What is written on the login button
 	OidcLoginVisual string
 }


@@ 52,6 53,7 @@ func ParseConfig() {
 		CookieSecret: util.LoadVar("TIXE_COOKIE_SECRET", ""),
 
 		OidcDomain: util.LoadVar("TIXE_OIDC_DOMAIN", ""),
+		OidcIssuerTrailingSlash: util.LoadVarBool("TIXE_OIDC_ISSUER_TRAILING_SLASH", false),
 		OidcClientID: util.LoadVar("TIXE_OIDC_CLIENTID", ""),
 		OidcSecret: util.LoadVar("TIXE_OIDC_SECRET", ""),