Bjorn Blomberg d4cea04941 fix(oidc): don't strip issuer trailing slash (Authentik discovery match) ...

go-oidc requires the issuer passed to NewProvider to exactly match the issuer
in the discovery document. Authentik returns ".../application/o/<slug>/" with a
trailing slash; we were stripping it, causing "issuer did not match". Pass the
issuer verbatim and fall back to the alternate slash form.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-05 23:03:15 +02:00

..

auth.go

feat: Authentik OIDC SSO, allow/deny RBAC, admin console & Gitea CI

2026-07-05 21:58:50 +02:00

oidc.go

fix(oidc): don't strip issuer trailing slash (Authentik discovery match)

2026-07-05 23:03:15 +02:00