Allow public clients created with API to have no client_secret (#1871)

Signed-off-by: Steffen Pøhner Henriksen <str3sses@gmail.com>
dexidp · Feb 19, 2021 · 0f68fad · 0f68fad
1 parent 86ea491
commit 0f68fad
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/api.go b/server/api.go
@@ -50,7 +50,7 @@ func (d dexAPI) CreateClient(ctx context.Context, req *api.CreateClientReq) (*ap
 	if req.Client.Id == "" {
 		req.Client.Id = storage.NewID()
 	}
-	if req.Client.Secret == "" {
+	if req.Client.Secret == "" && !req.Client.Public {
 		req.Client.Secret = storage.NewID() + storage.NewID()
 	}