Only return client_secret for confidential clients

This commit is contained in:
Emelia Smith 2024-05-16 17:13:58 +02:00
parent b21e7d8fdb
commit fad8f7b148
No known key found for this signature in database

View File

@ -8,7 +8,7 @@ class REST::CredentialApplicationSerializer < REST::ApplicationSerializer
end end
def client_secret def client_secret
object.secret object.secret if object.confidential?
end end
# Added for future forwards compatibility when we may decide to expire OAuth # Added for future forwards compatibility when we may decide to expire OAuth