Issue trying to login an OIDC user into the webui

[hollow3464]

Issue Description

When trying to login into the webui using an user provisioned through OIDC using authentik (I created an application using "stalwart-webui" for the clientId), the request is rejected with an InvalidIssuer error. Tried leaving the directory aud field empty, using "stalwart-webui" for the aud (this is what admin panel sends). Other clients work, I have a bulwark installation that works without issue using a different clientId using that client value for the aud or leaving the aud field empty

Expected Behavior

No response

Actual Behavior

No response

Reproduction Steps

No response

Relevant Log Output

No response

Stalwart Version

v0.16.x

Installation Method

Docker

Database Backend

RocksDB

Blob Storage

RocksDB

Search Engine

Internal

Directory Backend

Internal

Additional Context

No response

I acknowledge that:

• I have reviewed the documentation and FAQ and confirm that my issue is NOT addressed there.
• I have searched the Stalwart repository (both open and closed Discussions and Issues) and confirm this is not a duplicate.
• I have set the logging level to trace and included relevant log output if applicable.
• I agree to follow the project's Code of Conduct.

[mdecimus]

As the error indicates, the issuer in the JWT token does not match the issuer in the discovery document.

[hollow3464]

Lol, my bad, english is not my first language. But anyways it would be nice to have multiple specified issuers for the use case of having multiple apps specified in something like Authentik