logout.backchannel.path fails when http.root-path is present

[AB-xdev]

Describe the bug

Our config looks like this (note that we use a named tenant):

ROOT_PATH=/backend
quarkus.http.root-path=${ROOT_PATH}
...
quarkus.oidc.logout.backchannel.path=/oidc/back-channel-logout

If we now do a back-channel logout to http://localhost:8080/backend/oidc/back-channel-logout it fails with:

Tenant configuration for the tenant <redacted> is not available or does not match the backchannel logout path

We also tried using quarkus.oidc.logout.backchannel.path=${ROOT_PATH}/oidc/back-channel-logout but this results in the same problem.

Suspected cause

It looks like either

• the path is registered incorrectly:
  if registered with ${ROOT_PATH}/oidc/... it should likely point to /backend/oidc/... and not to - as currently - /backend/backend/oidc/...
• or that the matching check in

  quarkus/extensions/oidc/runtime/src/main/java/io/quarkus/oidc/runtime/BackChannelLogoutHandler.java

  Line 163 in 00b31c8

  && requestPath.equals(tenant.oidcConfig.logout.backchannel.path.orElse(null));

  should respect quarkus.http.root-path

Expected behavior

No response

Actual behavior

No response

How to Reproduce?

No response

Output of uname -a or ver

No response

Output of java -version

No response

Quarkus version or git rev

3.10.2

Build tool (ie. output of mvnw --version or gradlew --version)

No response

Additional information

No response

[quarkus-bot]

/cc @pedroigor (bearer-token,oidc)