From 1933d30a7f380a7fd8ec08c34df15468980c8b23 Mon Sep 17 00:00:00 2001
From: Christian Morales Guerrero
 <46071367+christianmg99@users.noreply.github.com>
Date: Sat, 20 Apr 2024 01:36:27 +0200
Subject: [PATCH] chg: [config] Set Oidc issuer

---
 app/Plugin/OidcAuth/Lib/Oidc.php | 3 ++-
 app/Plugin/OidcAuth/README.md    | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/Plugin/OidcAuth/Lib/Oidc.php b/app/Plugin/OidcAuth/Lib/Oidc.php
index 04705e228..c40c14ec3 100644
--- a/app/Plugin/OidcAuth/Lib/Oidc.php
+++ b/app/Plugin/OidcAuth/Lib/Oidc.php
@@ -302,9 +302,10 @@ class Oidc
         $providerUrl = $this->getConfig('provider_url');
         $clientId = $this->getConfig('client_id');
         $clientSecret = $this->getConfig('client_secret');
+        $issuer = $this->getConfig('issuer', $providerUrl);
 
         if (class_exists("\JakubOnderka\OpenIDConnectClient")) {
-            $oidc = new \JakubOnderka\OpenIDConnectClient($providerUrl, $clientId, $clientSecret);
+            $oidc = new \JakubOnderka\OpenIDConnectClient($providerUrl, $clientId, $clientSecret, $issuer);
         } else if (class_exists("\Jumbojett\OpenIDConnectClient")) {
             throw new Exception("Jumbojett OIDC implementation is not supported anymore, please use JakubOnderka's client");
         } else {
diff --git a/app/Plugin/OidcAuth/README.md b/app/Plugin/OidcAuth/README.md
index f4e47fcd3..062a7491e 100644
--- a/app/Plugin/OidcAuth/README.md
+++ b/app/Plugin/OidcAuth/README.md
@@ -32,6 +32,7 @@ $config = array(
     ...
     'OidcAuth' = [
         'provider_url' => '{{ OIDC_PROVIDER }}',
+        'issuer' => '{{ OIDC_ISSUER }}', // If omitted, it defaults to provider_url
         'client_id' => '{{ OIDC_CLIENT_ID }}',
         'client_secret' => '{{ OIDC_CLIENT_SECRET }}',
         'role_mapper' => [ // if user has multiple roles, first role that match will be assigned to user