From 0e98dd85ec4a50ac587d3f625e86314b78795985 Mon Sep 17 00:00:00 2001
From: Raul Sampedro <5142014+rsrdesarrollo@users.noreply.github.com>
Date: Thu, 11 Sep 2025 14:43:27 +0200
Subject: [PATCH] fix #3196

---
 pkg/providers/oidc/provider_verifier.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/providers/oidc/provider_verifier.go b/pkg/providers/oidc/provider_verifier.go
index b6b9a970..e83ae6dd 100644
--- a/pkg/providers/oidc/provider_verifier.go
+++ b/pkg/providers/oidc/provider_verifier.go
@@ -10,6 +10,7 @@ import (
 	"os"
 
 	"github.com/coreos/go-oidc/v3/oidc"
+	"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/requests"
 	k8serrors "k8s.io/apimachinery/pkg/util/errors"
 )
 
@@ -132,6 +133,7 @@ func getVerifierBuilder(ctx context.Context, opts ProviderVerifierOptions) (veri
 		var err error
 
 		if opts.JWKsURL != "" {
+			ctx = oidc.ClientContext(ctx, requests.DefaultHTTPClient)
 			keySet = oidc.NewRemoteKeySet(ctx, opts.JWKsURL)
 		} else {
 			keySet, err = newKeySetFromStatic(opts.PublicKeyFiles)