From a6090b98dc7511811ca4ba987d54160ad8235b65 Mon Sep 17 00:00:00 2001
From: Rafael Herrero <84326903+RafaelHerrero@users.noreply.github.com>
Date: Mon, 2 Mar 2026 12:48:12 +0100
Subject: [PATCH] fix(iam): remove incorrect trailing slash from OIDC issuer
 URL (#2050)

---
 crates/iam/src/oidc.rs | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/crates/iam/src/oidc.rs b/crates/iam/src/oidc.rs
index f6d7541db..0d3136b21 100644
--- a/crates/iam/src/oidc.rs
+++ b/crates/iam/src/oidc.rs
@@ -779,10 +779,6 @@ fn normalize_config_url(config_url: &str) -> Result<String, String> {
         issuer.push_str(normalized_path);
     }
 
-    if !issuer.ends_with('/') {
-        issuer.push('/');
-    }
-
     Ok(issuer)
 }
 
@@ -892,15 +888,15 @@ mod tests {
     fn test_normalize_config_url() {
         assert_eq!(
             normalize_config_url("https://idp.example.com/.well-known/openid-configuration").unwrap(),
-            "https://idp.example.com/"
+            "https://idp.example.com"
         );
         assert_eq!(
             normalize_config_url("https://idp.example.com/.well-known/openid-configuration/").unwrap(),
-            "https://idp.example.com/"
+            "https://idp.example.com"
         );
         assert_eq!(
             normalize_config_url("https://idp.example.com/custom/realm").unwrap(),
-            "https://idp.example.com/custom/realm/"
+            "https://idp.example.com/custom/realm"
         );
         assert!(normalize_config_url("https://idp.example.com/.well-known/invalid").is_err());
         assert!(normalize_config_url("gopher://idp.example.com").is_err());