feat(oidc): client authentication modes (#5150)

This adds a feature to OpenID Connect 1.0 where clients can be restricted to a specific client authentication mode, as well as implements some backend requirements for the private_key_jwt client authentication mode (and potentially the tls_client_auth / self_signed_tls_client_auth client authentication modes). It also adds some improvements to configuration defaults and validations which will for now be warnings but likely be made into errors.

Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/internal/utils/strings.go b/internal/utils/strings.go
index 3e9dc12cd..1afdfc89d 100644
--- a/internal/utils/strings.go
+++ b/internal/utils/strings.go
@@ -200,8 +200,8 @@ func URLsFromStringSlice(urls []string) []url.URL {
 }
 
 // OriginFromURL returns an origin url.URL given another url.URL.
-func OriginFromURL(u url.URL) (origin url.URL) {
-	return url.URL{
+func OriginFromURL(u *url.URL) (origin *url.URL) {
+	return &url.URL{
 		Scheme: u.Scheme,
 		Host:   u.Host,
 	}