jazzband / django-oauth-toolkit

OAuth2 goodies for the Djangonauts!
https://django-oauth-toolkit.readthedocs.io
Other
3.06k stars 777 forks source link

/.well-known/openid-configuration is redirected to /.well-known/openid-configuration/ #1363

Closed dopry closed 7 months ago

dopry commented 7 months ago

Describe the bug https://openid.net/specs/openid-connect-discovery-1_0.html#rfc.section.4 specifies the path as /.well-known/openid-configuration

currently when one requests that path they are redirected to /.well-known/openid-configuration which slows discovery on the client and can cause cors issues with the redirect.

To Reproduce start up tests/app/idp and open http://localhost:8000/o/.well-known/openid-configuration in your browsers, you will be redirected to http://localhost:8000/o/.well-known/openid-configuration/

Expected behavior The JSON is returned and there is no redirect.

Version 2.3.0