Issuer URL check broken

[m-lima]

On

openidconnect-rs/src/discovery/mod.rs

Line 383 in 202c8b1

if provider_metadata.issuer() != issuer_url {

the issuer URL is checked agains the response from the discovery document. However this check is maybe too naïve and fails do to final slash.

How to reproduce

    let issuer = openidconnect::url::Url::parse("https://accounts.google.com")?;
    let metadata = openidconnect::core::CoreProviderMetadata::discover(
        &openidconnect::IssuerUrl::from_url(issuer),
        &client,
    )?;

This will cause the following error:

Validation("unexpected issuer URI `https://accounts.google.com` (expected `https://accounts.google.com/`)")

[inklesspen]

I ran into this issue today also.