fix: resolve post-rebase OIDC compile regressions

Author: BoxBoxJason

backend/src/auth/oidcRoutes.config.test.ts

@@ -87,13 +87,16 @@ describe("OIDC client configuration", () => {
           enforced: true,
           providerName: "Test OIDC",
           issuerUrl: "https://issuer.example",
+          discoveryUrl: null,
           clientId: "client-id",
           clientSecret: "client-secret",
           redirectUri: "https://app.example/api/auth/oidc/callback",
           idTokenSignedResponseAlg: "HS256",
           scopes: "openid email profile",
           emailClaim: "email",
           emailVerifiedClaim: "email_verified",
+          groupsClaim: "groups",
+          adminGroups: [],
           requireEmailVerified: true,
           jitProvisioning: true,
           firstUserAdmin: true,
@@ -149,13 +152,16 @@ describe("OIDC client configuration", () => {
           enforced: true,
           providerName: "Test OIDC",
           issuerUrl: "https://issuer.example",
+          discoveryUrl: null,
           clientId: "client-id",
           clientSecret: "client-secret",
           redirectUri: "https://app.example/api/auth/oidc/callback",
           idTokenSignedResponseAlg: null,
           scopes: "openid email profile",
           emailClaim: "email",
           emailVerifiedClaim: "email_verified",
+          groupsClaim: "groups",
+          adminGroups: [],
           requireEmailVerified: true,
           jitProvisioning: true,
           firstUserAdmin: true,

backend/src/auth/oidcRoutes.ts

@@ -350,7 +350,7 @@ export const registerOidcRoutes = (deps: RegisterOidcRoutesDeps) => {
         });
         const idTokenSignedResponseAlg = resolveIdTokenSignedResponseAlg(
           config.oidc.idTokenSignedResponseAlg,
-          (issuer as any)?.metadata ?? {}
+          (clientIssuer as any)?.metadata ?? {}
         );
 
         const clientConfig: Record<string, unknown> = {