Method GetClient

auth/oidc.go:247–274

GetClient initializes the client on first successful request.

(ctx context.Context, buildCallbackURLFunc OIDCCallbackURLFunc)

// GetClient initializes the client on first successful request.
func (op *OIDCProvider) GetClient(ctx context.Context, buildCallbackURLFunc OIDCCallbackURLFunc) (*OIDCClient, error) {
	// If the callback URL isn't defined for the provider, uses buildCallbackURLFunc to construct (based on current request)

	if op.clientInit.IsTrue() {
		return op.client, nil
	}
	op.clientInitLock.Lock()
	defer op.clientInitLock.Unlock()

	// Check again to see if the previous lock holder initialized the client
	if op.clientInit.IsTrue() {
		return op.client, nil
	}

	// If the redirect URL is not defined for the provider generate it from the
	// handler request and set it on the provider
	if op.CallbackURL == nil || *op.CallbackURL == "" {
		callbackURL := buildCallbackURLFunc(op.Name, op.IsDefault)
		if callbackURL != "" {
			op.CallbackURL = &callbackURL
		}
	}
	if err := op.initOIDCClient(ctx); err != nil {
		return nil, err
	}
	op.clientInit.Set(true)
	return op.client, nil
}

// To support multiple providers referencing the same issuer, the user prefix used to build the SG usernames for
// a provider is based on the issuer