use more future proof config for static clients (#11175)

src/IConfigOptions.ts

@@ -201,7 +201,12 @@ export interface IConfigOptions {
      * The issuer URL must have a trailing `/`.
      * OPTIONAL
      */
-    oidc_static_client_ids?: Record<string, string>;
+    oidc_static_clients?: Record<
+        string,
+        {
+            client_id: string;
+        }
+    >;
 }
 
 export interface ISsoRedirectOptions {

src/Login.ts

@@ -102,7 +102,7 @@ export default class Login {
                 const oidcFlow = await tryInitOidcNativeFlow(
                     this.delegatedAuthentication,
                     SdkConfig.get().brand,
-                    SdkConfig.get().oidc_static_client_ids,
+                    SdkConfig.get().oidc_static_clients,
                 );
                 return [oidcFlow];
             } catch (error) {
@@ -211,9 +211,9 @@ export interface OidcNativeFlow extends ILoginFlow {
 const tryInitOidcNativeFlow = async (
     delegatedAuthConfig: ValidatedDelegatedAuthConfig,
     brand: string,
-    oidcStaticClientIds?: IConfigOptions["oidc_static_client_ids"],
+    oidcStaticClients?: IConfigOptions["oidc_static_clients"],
 ): Promise<OidcNativeFlow> => {
-    const clientId = await getOidcClientId(delegatedAuthConfig, brand, window.location.origin, oidcStaticClientIds);
+    const clientId = await getOidcClientId(delegatedAuthConfig, brand, window.location.origin, oidcStaticClients);
 
     const flow = {
         type: "oidcNativeFlow",

src/utils/oidc/registerClient.ts

@@ -17,6 +17,7 @@ limitations under the License.
 import { logger } from "matrix-js-sdk/src/logger";
 import { registerOidcClient } from "matrix-js-sdk/src/oidc/register";
 
+import { IConfigOptions } from "../../IConfigOptions";
 import { ValidatedDelegatedAuthConfig } from "../ValidatedServerConfig";
 
 /**
@@ -25,10 +26,13 @@ import { ValidatedDelegatedAuthConfig } from "../ValidatedServerConfig";
  * @param staticOidcClients static client config from config.json
  * @returns clientId if found, otherwise undefined
  */
-const getStaticOidcClientId = (issuer: string, staticOidcClients?: Record<string, string>): string | undefined => {
+const getStaticOidcClientId = (
+    issuer: string,
+    staticOidcClients?: IConfigOptions["oidc_static_clients"],
+): string | undefined => {
     // static_oidc_clients are configured with a trailing slash
     const issuerWithTrailingSlash = issuer.endsWith("/") ? issuer : issuer + "/";
-    return staticOidcClients?.[issuerWithTrailingSlash];
+    return staticOidcClients?.[issuerWithTrailingSlash]?.client_id;
 };
 
 /**
@@ -46,7 +50,7 @@ export const getOidcClientId = async (
     delegatedAuthConfig: ValidatedDelegatedAuthConfig,
     clientName: string,
     baseUrl: string,
-    staticOidcClients?: Record<string, string>,
+    staticOidcClients?: IConfigOptions["oidc_static_clients"],
 ): Promise<string> => {
     const staticClientId = getStaticOidcClientId(delegatedAuthConfig.issuer, staticOidcClients);
     if (staticClientId) {