[Bug]: nil pointer dereference when not setting unauthorized handler

[rgzr]

Preflight Checklist

• [X] I could not find a solution in the documentation, the existing issues or discussions
• [ ] I have joined the ZITADEL chat

Version

v3.11.1

Describe the problem caused by this bug

NewRelyingPartyOIDC does not set unauthorizedHandler field, so when an unauthorized error happens and unauthorizedError function is called, it produces a panic here https://github.com/zitadel/oidc/blob/main/pkg/client/rp/relying_party.go#L755

The check against HasUnauthorizedHandler interface passes because relyingParty struct has a method UnauthorizedHandler that returns its unauthorizedHandler field (which can be nil).

Maybe apart from checking against the interface, the function returned by the UnauthorizedHandler method should be checked against nil.

To reproduce

Instantiate a NewRelyingPartyOIDC without additional options and force an unauthorized error.

Screenshots

No response

Expected behavior

No response

Additional Context

No response

[livio-a]

Hey @rgzr. Thanks for raising this. We'll look into this and how we can handle the nil check the easiest way.

[github-actions[bot]]

:tada: This issue has been resolved in version 3.11.2 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: