Using issuer url: sts.windows.net

[daveneeley]

I'm trying to set up guard with the Azure provider. I see the below messages repeatedly in the logs.

azure.go:89] Using issuer url: https://sts.windows.net/<my tenant id>/
utils.go:130] failed to verify token for azure: oidc: malformed jwt: square/go-jose: compact JWS format must have three parts

It seems like the issuer should be login.microsoftonline.com, instead of sts.windows.net. What code determines this?

How can I determine what the malformed JWT looks like, so I can address this?