From 1a3a2f93a7a89409dedb9d5cfb51b3bf3466984d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Steffen=20P=C3=B8hner=20Henriksen?= Date: Tue, 24 Nov 2020 09:20:07 +0100 Subject: [PATCH] Allow public clients created with API to have no client_secret MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Steffen Pøhner Henriksen --- server/api.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/api.go b/server/api.go index 98fd20b895..9b5f123f42 100644 --- a/server/api.go +++ b/server/api.go @@ -50,7 +50,7 @@ func (d dexAPI) CreateClient(ctx context.Context, req *api.CreateClientReq) (*ap if req.Client.Id == "" { req.Client.Id = storage.NewID() } - if req.Client.Secret == "" { + if req.Client.Secret == "" && !req.Client.Public { req.Client.Secret = storage.NewID() + storage.NewID() }