From 4eaa1a2f2eceb0be43c82efa7dfadb1b424471fe Mon Sep 17 00:00:00 2001
From: Dylan Vanmali <dylanvanmali@yahoo.com>
Date: Wed, 24 Dec 2025 10:53:07 -0800
Subject: [PATCH] fix: double slash

---
 packages/oauth-provider/src/client-resource.ts | 2 +-
 packages/oauth-provider/src/logout.ts          | 2 +-
 packages/oauth-provider/src/metadata.ts        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/oauth-provider/src/client-resource.ts b/packages/oauth-provider/src/client-resource.ts
index 9c0aa6ce07..e70a237930 100644
--- a/packages/oauth-provider/src/client-resource.ts
+++ b/packages/oauth-provider/src/client-resource.ts
@@ -62,7 +62,7 @@ export const oauthProviderResourceClient = <T extends Auth | undefined>(
 						opts?.jwksUrl ??
 						jwtPluginOptions?.jwks?.remoteUrl ??
 						(authServerBaseUrl
-							? `${authServerBaseUrl + (authServerBasePath ?? "")}/${jwtPluginOptions?.jwks?.jwksPath ?? "jwks"}`
+							? `${authServerBaseUrl + (authServerBasePath ?? "")}${jwtPluginOptions?.jwks?.jwksPath ?? "/jwks"}`
 							: undefined);
 					const introspectUrl =
 						opts?.remoteVerify?.introspectUrl ??
diff --git a/packages/oauth-provider/src/logout.ts b/packages/oauth-provider/src/logout.ts
index 81c3bbce53..a00e0f88c7 100644
--- a/packages/oauth-provider/src/logout.ts
+++ b/packages/oauth-provider/src/logout.ts
@@ -38,7 +38,7 @@ export async function rpInitiatedLogoutEndpoint(
 	const jwtPluginOptions = jwtPlugin?.options;
 	const jwksUrl =
 		jwtPluginOptions?.jwks?.remoteUrl ??
-		`${baseURL}/${jwtPluginOptions?.jwks?.jwksPath ?? "jwks"}`;
+		`${baseURL}${jwtPluginOptions?.jwks?.jwksPath ?? "/jwks"}`;
 
 	let clientId = client_id;
 	if (!clientId) {
diff --git a/packages/oauth-provider/src/metadata.ts b/packages/oauth-provider/src/metadata.ts
index 507e333397..fdd9fafe11 100644
--- a/packages/oauth-provider/src/metadata.ts
+++ b/packages/oauth-provider/src/metadata.ts
@@ -28,7 +28,7 @@ export function authServerMetadata(
 		jwks_uri: overrides?.jwt_disabled
 			? undefined
 			: (opts?.jwks?.remoteUrl ??
-				`${baseURL}/${opts?.jwks?.jwksPath ?? "jwks"}`),
+				`${baseURL}${opts?.jwks?.jwksPath ?? "/jwks"}`),
 		registration_endpoint: `${baseURL}/oauth2/register`,
 		introspection_endpoint: `${baseURL}/oauth2/introspect`,
 		revocation_endpoint: `${baseURL}/oauth2/revoke`,