external-auth-server: Manual definition of issuer:{} as a solution for a blocked connection from RP to OP

Hi Travis,

I see in the examples, that it is possible to manually put the results of the discovery of .well-known/openid-configurationin the config_token. My question is: will this prevent eas to do a callback to the OP?

Reason for me asking is: I have a situation where the OP is inside an intranet and cannot call outside neither can it called from the outside. EAS and the service are in the internet. Will I be able to provide the eas protected service in the internet to the users in the intranet using the OP in the intranet?