AuzerAD: Handle empty client_authentication case (#99437)

AuzerAD: Require client secret when client_authentication is set to empty string
2025-01-23 13:04:51 +01:00
parent b0347792cc
commit b79f1b2a29
1 changed files with 1 additions and 1 deletions
@@ -373,7 +373,7 @@ func validateClientAuthentication(info *social.OAuthInfo, requester identity.Req
 		}
 		return nil

-	case social.ClientSecretPost:
+	case social.ClientSecretPost, "":
 		if info.ClientSecret == "" {
 			return ssosettings.ErrInvalidOAuthConfig("Client secret is required for Client secret authentication.")
 		}