issuer and auth0_base_url should hold the same value...?

[francescopellegrini]

Hi, I'm a bit annoyed by the fact that issuer and auth0_base_url contain basically the same value.

When I removed the trailing slash from issuer, token validation failed.
When I added the trailing slash to auth0_base_url, OpenID config retrieval failed (because the library adds a trailing slash of its own).

Could these values be unified into a single one?

[cottinisimone]

Starting from this RFC i would say that issuer MIGHT contain the url of the authority that issued the token. It might be another value for other authorities and since this library is public i think it's better to leave it as it is.

For sure we can change metadata_url behaviour to add a trailing slash if the url doesn't end with a / only