Arsharth/dex
1
0
Fork 0
forked from mystiq/dex
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow public clients created with API to have no client_secret (#1871)

Browse source 
Signed-off-by: Steffen Pøhner Henriksen <str3sses@gmail.com>
This commit is contained in:
Steffen Pøhner Henriksen 2021-02-19 10:18:54 +01:00 committed by GitHub
parent 86ea49173c
commit 0f68fadb9a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
server/api.go
View file

@ -50,7 +50,7 @@ func (d dexAPI) CreateClient(ctx context.Context, req *api.CreateClientReq) (*ap
if req.Client.Id == "" { if req.Client.Id == "" {
req.Client.Id = storage.NewID() req.Client.Id = storage.NewID()
} }
if req.Client.Secret == "" { if req.Client.Secret == "" && !req.Client.Public {
req.Client.Secret = storage.NewID() + storage.NewID() req.Client.Secret = storage.NewID() + storage.NewID()
} }