only load config in pathPoll when in device flow

Author: DrDaveD

path_oidc.go

@@ -405,14 +405,6 @@ func (b *jwtAuthBackend) processToken(ctx context.Context, config *jwtConfig, oi
 
 // second half of the client API for direct and device callback modes
 func (b *jwtAuthBackend) pathPoll(ctx context.Context, req *logical.Request, d *framework.FieldData) (*logical.Response, error) {
-	config, err := b.config(ctx, req.Storage)
-	if err != nil {
-		return nil, err
-	}
-	if config == nil {
-		return logical.ErrorResponse(errLoginFailed + " Could not load configuration"), nil
-	}
-
 	stateID := d.Get("state").(string)
 	state := b.getState(stateID)
 	if state == nil {
@@ -442,6 +434,14 @@ func (b *jwtAuthBackend) pathPoll(ctx context.Context, req *logical.Request, d *
 	}
 
 	if role.CallbackMode == callbackModeDevice {
+		config, err := b.config(ctx, req.Storage)
+		if err != nil {
+			return nil, err
+		}
+		if config == nil {
+			return logical.ErrorResponse(errLoginFailed + " Could not load configuration"), nil
+		}
+
 		caCtx, err := b.createCAContext(ctx, config.OIDCDiscoveryCAPEM)
 		if err != nil {
 			return nil, err