Merge pull request #28 from carrvo/dev/normalize-issuer

Looks good, thank you! 🎉

Author: gRegorLove

src/IndieAuth/Client.php

@@ -535,7 +535,7 @@ public static function validateIssuerMatch($params, $expected_issuer = '') {
       return new ErrorResponse('missing_iss', 'The authorization server did not return the iss parameter');
     }
 
-    if ($params['iss'] !== $expected_issuer) {
+    if (self::normalizeMeURL($params['iss']) !== self::normalizeMeURL($expected_issuer)) {
       return new ErrorResponse('invalid_iss', 'The authorization server returned an invalid iss parameter');
     }
   }

tests/ClientTest.php

@@ -75,6 +75,14 @@ public function testValidateIssuer()
     $this->assertNull($response);
   }
 
+  public function testValidateIssuerNormalizes()
+  {
+    $expected_issuer = 'https://issuer.example.com';
+    $params = ['iss' => $expected_issuer];
+    $response = Client::validateIssuerMatch($params, $expected_issuer.'/');
+    $this->assertNull($response);
+  }
+
   public function testValidateIssuerMissing()
   {
     $expected_issuer = 'https://issuer.example.com/';