enforce no trailing slashes in config urls

src/corbado_python_sdk/utils/validators.py

@@ -27,6 +27,9 @@ def url_validator(url: str) -> str:
     if parts.username:
         raise ValueError("Assert failed: username needs to be empty")
 
+    if parts.path:
+        raise ValueError("Assert failed: path needs to be empty")
+
     if parts.password:
         raise ValueError("Assert failed: password needs to be empty")
 

tests/unit/test_config.py

@@ -13,7 +13,7 @@ def test_set_frontend_api(self):
                     project_id="pro-123",
                     api_secret="corbado1_123",
                     frontend_api=frontend_api,
-                    backend_api="https://backendapi.cloud.corbado.io/",
+                    backend_api="https://backendapi.cloud.corbado.io",
                 )
                 error = False
             except ValueError:
@@ -24,7 +24,7 @@ def test_set_backend_api(self):
         for backend_api, valid in self.provide_urls():
             try:
                 config = Config(
-                    project_id="pro-123", api_secret="corbado1_123", backend_api=backend_api, frontend_api="https://test.com/"
+                    project_id="pro-123", api_secret="corbado1_123", backend_api=backend_api, frontend_api="https://test.com"
                 )
                 config.backend_api = backend_api
                 error = False
@@ -33,8 +33,8 @@ def test_set_backend_api(self):
             self.assertEqual(valid, second=not error)
 
     def test_get_backend_api(self):
-        test_url = "https://backendapi.cloud.corbado.io/"
-        config = Config(project_id="pro-123", api_secret="corbado1_123", frontend_api="https://test.com/", backend_api=test_url)
+        test_url = "https://backendapi.cloud.corbado.io"
+        config = Config(project_id="pro-123", api_secret="corbado1_123", frontend_api="https://test.com", backend_api=test_url)
         self.assertTrue(config.backend_api.endswith("/v2"))
 
     def provide_urls(self):
@@ -44,6 +44,7 @@ def provide_urls(self):
             ("http://auth.acme.com", False),  # Only HTTPS
             ("https://[email protected]", False),  # No user
             ("https://user:[email protected]", False),  # No user no password
+            ("https://auth.acme.com/", False), # No path
             ("https://auth.acme.com?xxx", False),  # No query string
             ("https://auth.acme.com#xxx", False),  # No fragment
             ("https://auth.acme.com", True),

tests/unit/test_session_service.py

@@ -270,7 +270,7 @@ def test_set_cname_expect_issuer_changed(self):
             api_secret="corbado1_XXX",
             project_id="pro-55",
             backend_api="https://backendapi.cloud.corbado.io/",
-            frontend_api="https://test.com/",
+            frontend_api="https://test.com",
             cname=test_cname,
         )