Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Supertokens seems to convert OIDC discovery URLs to lower case which cause the IDP to return a 404 #789

Open
kgomes opened this issue Feb 2, 2024 · 0 comments

Comments

@kgomes
Copy link

kgomes commented Feb 2, 2024

🐛 Bug Report
I am using a NodeJS backend and using the ThirdPartyEmailPassword recipe. We use Cisco Duo which has an OIDC discovery endpoint. The OIDC endpoint is case-senstive and it appears that the SuperTokens SDK converts all the characters in the URL to lower case which causes the IDP to return a 404 to the Supertokens SDK.

Useful informations
It pretty easy to repeat as I can take the OIDC url and use curl and it works fine. When I turn on debug messages on the supertokens node module, it spits out the URL it tries to use to get to the OIDC endpoint. The URL that shows up in the log is all lower case and If I take that URL directly and run curl with it, I also get a 404. The solution would be to not convert everything to lower case (or at least have an option to disable that).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant