clientRegistration.builder添加了“/quot”。在发行人URI结束时。如何预防呢？

Question

我的应用程序需要在Spring Boot中使用Spring Security，OAuth 2.0和OpenID。 API提供商在文档中提到了我的OpenID发行人URI不应有落后的“/”。

application.yaml

spring:
  security:
    oauth2:
      client:
        registration:
          IdOfMyApp:
            provider: https://api.provider.guys.com
            client-id: [my id here]
            client-secret: [my secret here]
            client-authentication-method: basic
            authorization-grant-type: authorization_code
            scope:
            - pr.pro
            - pr.act
            - openid
            - offline
            redirect-uri: https://my.domain.com/fallback
            client-name: My App Name
        provider:
         IdOfProvider:
          authorization-uri: https://api.provider.guys.com/oauth2/auth
          token-uri: https://api.provider.guys.com/oauth2/token
          issuer-uri: https://api.provider.guys.com
      resourceserver:
        jwt:
          issuer-uri: https://api.provider.guys.com
logging:
  level:
    '[org.springframework.web]': DEBUG

因此，我的发行人-URI是https://api.provider.guys.com（我将其作为占位符，但实际URI是相似的）。

当我转到clientRegistration.builder with providerConfiguration（oferizationserververmetadata metadata，string issuer） org.springframework.security.security.oauth.oauth.oauth2.client2.client.client。注意到元数据参数具有“ https://api.provider.guys.com/”（带有trailing/），并且发行者参数的值为“ https://api.provider.guys.com”。

private static ClientRegistration.Builder withProviderConfiguration(AuthorizationServerMetadata metadata,
        String issuer) {
    String metadataIssuer = metadata.getIssuer().getValue();
    Assert.state(issuer.equals(metadataIssuer),
            () -> "The Issuer \"" + metadataIssuer + "\" provided in the configuration metadata did "
                    + "not match the requested issuer \"" + issuer + "\"");
    String name = URI.create(issuer).getHost();
    ClientAuthenticationMethod method = getClientAuthenticationMethod(metadata.getTokenEndpointAuthMethods());
    Map<String, Object> configurationMetadata = new LinkedHashMap<>(metadata.toJSONObject());
    // @formatter:off
    return ClientRegistration.withRegistrationId(name)
            .userNameAttributeName(IdTokenClaimNames.SUB)
            .authorizationGrantType(AuthorizationGrantType.AUTHORIZATION_CODE)
            .clientAuthenticationMethod(method)
            .redirectUri("{baseUrl}/{action}/oauth2/code/{registrationId}")
            .authorizationUri((metadata.getAuthorizationEndpointURI() != null) ? metadata.getAuthorizationEndpointURI().toASCIIString() : null)
            .providerConfigurationMetadata(configurationMetadata)
            .tokenUri(metadata.getTokenEndpointURI().toASCIIString())
            .issuerUri(issuer)
            .clientName(issuer);
    // @formatter:on
}

然后发生此例外：

Caused by: java.lang.IllegalStateException: The Issuer "https://api.provider.guys.com/" provided in the configuration metadata did not match the requested issuer "https://api.provider.guys.com"

我的oauthclientConfiguration类

@Configuration
public class OAuthClientConfiguration
{
    @Bean
    ReactiveClientRegistrationRepository  clientRegistrations(
            @Value(value = "${spring.security.oauth2.client.provider.IdOfProvider.token-uri}") String tokenUri,
            @Value(value = "${spring.security.oauth2.client.registration.IdOfMyApp.client-id}") String clientId,
            @Value(value = "${spring.security.oauth2.client.registration.IdOfMyApp.client-secret}") String clientSecret,
            @Value(value = "${spring.security.oauth2.client.registration.IdOfMyApp.authorization-grant-type}") String authorizationGrantType,
            @Value(value = "${spring.security.oauth2.client.registration.IdOfMyApp.redirect-uri}") String redirectUri,
            @Value(value = "${spring.security.oauth2.client.provider.IdOfProvider.authorization-uri}") String authorizationUri,
            @Value(value = "${spring.security.oauth2.client.provider.IdOfProvider.issuer-uri}") String issuerUri)
    {
        ClientRegistration registration = ClientRegistration
                .withRegistrationId("IdOfMyApp")
                .tokenUri(tokenUri)
                .clientId(clientId)
                .clientSecret(clientSecret)
                .scope("pr.pro", "pr.act", "openid", "offline")
                .authorizationGrantType(new AuthorizationGrantType(authorizationGrantType))
                .redirectUri(redirectUri)
                .authorizationUri(authorizationUri)
                .issuerUri(issuerUri)
                .build();
        
        return new InMemoryReactiveClientRegistrationRepository(registration);
    }
    
    @Bean
    WebClient webClient(ReactiveClientRegistrationRepository clientRegistrations)
    {
        InMemoryReactiveOAuth2AuthorizedClientService clientService = new InMemoryReactiveOAuth2AuthorizedClientService(clientRegistrations);
        AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager authorizedClientManager  = new AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager(clientRegistrations, clientService);
        ServerOAuth2AuthorizedClientExchangeFilterFunction oauth = new ServerOAuth2AuthorizedClientExchangeFilterFunction(authorizedClientManager);
        oauth.setDefaultClientRegistrationId("IdOfMyApp");
        return WebClient.builder().filter(oauth).build();
    }
}

如何防止在oferizationserververmetadata对象中，“/”将其附加到我的发行者URI上？