oidc fixes

Author: GitTimeraider

app/routes.py

@@ -863,10 +863,10 @@ def oidc_settings():
         oidc_config.display_name = form.display_name.data
         oidc_config.client_id = form.client_id.data
         oidc_config.client_secret = form.client_secret.data
-        oidc_config.discovery_endpoint = form.discovery_endpoint.data or None
-        oidc_config.authorization_endpoint = form.authorization_endpoint.data or None
-        oidc_config.token_endpoint = form.token_endpoint.data or None
-        oidc_config.userinfo_endpoint = form.userinfo_endpoint.data or None
+        oidc_config.discovery_endpoint = form.discovery_endpoint.data or ''
+        oidc_config.authorization_endpoint = form.authorization_endpoint.data or ''
+        oidc_config.token_endpoint = form.token_endpoint.data or ''
+        oidc_config.userinfo_endpoint = form.userinfo_endpoint.data or ''
         oidc_config.user_mapping_field = form.user_mapping_field.data
         oidc_config.custom_attribute = form.custom_attribute.data if form.user_mapping_field.data == 'custom' else None
         oidc_config.is_enabled = form.is_enabled.data
@@ -908,7 +908,7 @@ def oidc_login():
         client_kwargs = {'scope': 'openid profile email'}
 
         # Check if using discovery or manual endpoints
-        if oidc_config.discovery_endpoint:
+        if oidc_config.discovery_endpoint and oidc_config.discovery_endpoint.strip():
             # Use discovery endpoint
             try:
                 oidc_client = oauth.register(
@@ -993,7 +993,7 @@ def oidc_callback():
         # Register the OIDC client (same as in login)
         client_kwargs = {'scope': 'openid profile email'}
 
-        if not use_manual and oidc_config.discovery_endpoint:
+        if not use_manual and oidc_config.discovery_endpoint and oidc_config.discovery_endpoint.strip():
             # Try discovery endpoint
             try:
                 oidc_client = oauth.register(