Resolve "[OAuth] .well-known must be mounted under /"

Closes #606 (closed)

❯ curl localhost:8000/.well-known/openid-configuration
{"issuer": "http://localhost:8000", "authorization_endpoint": "http://localhost:8000/authorize/", "token_endpoint": "http://localhost:8000/token/", "userinfo_endpoint": "http://localhost:8000/userinfo/", "jwks_uri": "http://localhost:8000/.well-known/jwks.json", "response_types_supported": ["code", "token", "id_token", "id_token token", "code token", "code id_token", "code id_token token"], "subject_types_supported": ["public"], "id_token_signing_alg_values_supported": ["HS256"], "token_endpoint_auth_methods_supported": ["client_secret_post", "client_secret_basic"], "claims_supported": ["sub"]}%

aleksis/core/settings.py

@@ -390,6 +390,7 @@ OAUTH2_PROVIDER = {
     "SCOPES_BACKEND_CLASS": "aleksis.core.util.auth_helpers.AppScopes",
     "OAUTH2_VALIDATOR_CLASS": "aleksis.core.util.auth_helpers.CustomOAuth2Validator",
     "OIDC_ENABLED": True,
+    "OIDC_ISS_ENDPOINT": BASE_URL,
     "REFRESH_TOKEN_EXPIRE_SECONDS": _settings.get("oauth2.token_expiry", 86400),
     "PKCE_REQUIRED": False,
 }
@@ -416,10 +417,6 @@ elif _OIDC_RSA_KEY:
     with open(_OIDC_RSA_KEY, "r") as f:
         OAUTH2_PROVIDER["OIDC_RSA_PRIVATE_KEY"] = f.read()
 
-OAUTH2_PROVIDER["OIDC_ISS_ENDPOINT"] = _settings.get(
-    "http.base_url", "http://localhost:8000" if DEBUG else f"https://{ALLOWED_HOSTS[0]}"
-)
-
 # Configuration for REST framework
 REST_FRAMEWORK = {
     "DEFAULT_AUTHENTICATION_CLASSES": [