petal

Files

T

prosolis 6d71276513 Auth: pass the OIDC issuer through untouched, trailing slash and all

Deploying against the real Authentik turned this up immediately: its issuer
ends in a slash, OIDC requires the discovered issuer to match the configured
one byte-for-byte, and trimming it made discovery fail every time. The stub
in the tests happened to advertise a slashless issuer, so the whole suite
passed while the only provider Petal actually talks to could not be reached.
The stub now takes its issuer as a knob, and a regression test runs the flow
against one that ends in a slash.

Claude-Session: https://claude.ai/code/session_016y6gyuHkQXPiEuW8RGQyua

2026-07-27 07:27:54 -07:00

auth_test.go

Multi-user groundwork: request-scoped user identity

2026-07-26 21:42:37 -07:00

auth.go

Multi-user groundwork: request-scoped user identity

2026-07-26 21:42:37 -07:00

oidc_test.go

Auth: pass the OIDC issuer through untouched, trailing slash and all

2026-07-27 07:27:54 -07:00

oidc.go

Auth: pass the OIDC issuer through untouched, trailing slash and all