From 4709f631832a1e56c3d10117f0765658b9dadbca Mon Sep 17 00:00:00 2001
From: Gani Georgiev <gani.georgiev@gmail.com>
Date: Sun, 6 Sep 2026 11:17:40 +0300
Subject: [PATCH] optional assert in case the provider doesn't return id_token
 as string

---
 tools/auth/oidc.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/auth/oidc.go b/tools/auth/oidc.go
index e9a30a81..dfef2ad4 100644
--- a/tools/auth/oidc.go
+++ b/tools/auth/oidc.go
@@ -131,9 +131,9 @@ func (p *OIDC) FetchRawUserInfo(token *oauth2.Token) ([]byte, error) {
 }
 
 func (p *OIDC) parseIdToken(token *oauth2.Token) (jwt.MapClaims, error) {
-	idToken := token.Extra("id_token").(string)
+	idToken, _ := token.Extra("id_token").(string)
 	if idToken == "" {
-		return nil, errors.New("empty id_token")
+		return nil, errors.New("empty or invalid id_token")
 	}
 
 	claims := jwt.MapClaims{}