fix: client secret verification (for introspection) (#2570)

This commit is contained in:
Livio Amstutz
2021-10-26 11:33:59 +02:00
committed by GitHub
parent 7f62b169ac
commit a4127278e7
3 changed files with 43 additions and 3 deletions

View File

@@ -31,5 +31,8 @@ func (a *ApplicationRepo) AuthorizeClientIDSecret(ctx context.Context, clientID,
if err != nil {
return err
}
return a.Commands.VerifyOIDCClientSecret(ctx, app.ProjectID, app.ID, secret)
if app.IsOIDC {
return a.Commands.VerifyOIDCClientSecret(ctx, app.ProjectID, app.ID, secret)
}
return a.Commands.VerifyAPIClientSecret(ctx, app.ProjectID, app.ID, secret)
}