feature request : ability to overide discovery endpoint

[mcarbonneaux]

actualy the oidc client support only full discovery, but some time when you have dual exposition of your idp (internet and private), and if the client application are executed on private network you need to overide userinfo to go through private network to access to the idp.

in this case we need the ability to overide all the provider endpoint url.
like to add setter to all the discovered url after Provider initialisation.

like that:

       provider, err := oidc.NewProvider(ctx, issuerUrl)
       if err != nil {
		log.Fatal(err)
       }
       provider.setTokenURL("https://idp/mytokenurl")
       provider.setAuthURL("https://idp/myauthurl")
       provider.setUserInfoURL("https://idp/myuserinfourl")
       provider.setDeviceAuthURL("https://idp/mydeviceauthurl")
       provider.setJwksURL("https://idp/myjwksurl")

[ericchiang]

I think ProviderConfig is what you're looking for? https://pkg.go.dev/github.com/coreos/go-oidc/v3/oidc#ProviderConfig.NewProvider

[mcarbonneaux]

i've seen that, but no this oblige to overide all endpoint (and also the Algorithms).
the idea is to let the discovery to do, them only change some endpoint.

• go-oidc/oidc/oidc.go

  Line 191 in 0fe9887

  func (p *ProviderConfig) NewProvider(ctx context.Context) *Provider {

func (p *ProviderConfig) NewProvider(ctx context.Context) *Provider {
	return &Provider{
		issuer:        p.IssuerURL,
		authURL:       p.AuthURL,
		tokenURL:      p.TokenURL,
		deviceAuthURL: p.DeviceAuthURL,
		userInfoURL:   p.UserInfoURL,
		jwksURL:       p.JWKSURL,
		algorithms:    p.Algorithms,
		client:        getClient(ctx),
	}
}

all the attributes must be set without that is not working (there are not defaulted to the discovery)...

in the discovery version

go-oidc/oidc/oidc.go

Line 208 in 0fe9887

func NewProvider(ctx context.Context, issuer string) (*Provider, error) {

you have all the necessery to do the discovery, we need only the setter to overide value retreived....

[zepatrik]

I think it would be useful to have a (p *Provider) Config() *ProviderConfig function that can then be used with (p *ProviderConfig) NewProvider(ctx context.Context). This way one can do auto-discovery and still modify some options later, or even use it for some kind of caching.