diff --git a/providers/openidConnect/openidConnect.go b/providers/openidConnect/openidConnect.go index 5ae2a8482..ced419ef0 100644 --- a/providers/openidConnect/openidConnect.go +++ b/providers/openidConnect/openidConnect.go @@ -79,7 +79,7 @@ type OpenIDConfig struct { // If OpenID discovery is enabled, the end_session_endpoint field can optionally be provided // in the discovery endpoint response according to OpenID spec. See: // https://openid.net/specs/openid-connect-session-1_0-17.html#OPMetadata - EndSessionEndpoint string `json:"end_session_endpoint, omitempty"` + EndSessionEndpoint string `json:"end_session_endpoint,omitempty"` Issuer string `json:"issuer"` } @@ -374,6 +374,10 @@ func getOpenIDConfig(p *Provider, openIDAutoDiscoveryURL string) (*OpenIDConfig, } defer res.Body.Close() + if res.StatusCode < 200 || res.StatusCode >= 300 { + return nil, fmt.Errorf("Non-success code for Discovery URL: %d", res.StatusCode) + } + body, err := ioutil.ReadAll(res.Body) if err != nil { return nil, err