Currently ForwardedHeaderTransformer assumes the url is url encoded which is not necessarily the case.

I experienced an issue where the a query parameter as part of the OpenID Connect flow contains a "=" character which fails the verifyUriComponent check in HierarchicalUriComponents.

Comment From: pivotal-cla

@joakimmohn Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.

Comment From: pivotal-cla

@joakimmohn Thank you for signing the Contributor License Agreement!

Comment From: rstoyanchev

I've solved this in a slightly different way, essentially still avoiding encoding but also not causing a strict check to be performed.