fix issue with issuer and google oidc

[cgawron]

(iss in the token contains 'accounts.google.com', i.e. no 'https://')

[cgawron]

Fixes #523

[jeroenheijmans]

I presume you meant "Fixes #523"?

To comment on the change itself, I see a few problems:

• You've changed a lot of lines with whitespace only, I suggest reverting all of them because it will cause a lot of pain either in merging or for others in PR's
• The comment will be very unclear to future readers: it seems to be about the entire if condition or perhaps even the entire block
• This behavior should be opt in via configuration, as it deviates explicitly from the OpenID spec AFAICT

I do think the idea is okay though, and I guess for better or for worse, Google is a big enough player to warrant such a workaround/hack for specific situations.

[cgawron]

I have reverted the whitespace changes (sorry for that) and changed the logic so that it only applies to accounts.google.com.
Regarding opt in: I would prefer restricting the additional condition to accounts.google.com rather than adding an additional option (unless there are other issuers for which this is needed - which I'm not aware of).
@jeroenheijmans What else do I need to do so this PR can be merged?

[jeroenheijmans]

Was pinged in another PR, and just realized: perhaps #527 is a more generic/better way to solve the same thing.

[manfredsteyer]

Thanks for this PR. Let's go with #527