mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-13 19:44:21 +00:00
ad9422a7d0
When creating an app without secret or other type of authentication method, like JWT, and the authentication type is switched afterwards the app would remain without generated secret. If then client authentication with secret is attempted, for example on the token endpoint, the handler would panic in the crypto.CompareHash function on the nile pointer to the CryptoValue. This fix introduces a nil pointer check in crypt.CompareHash and returns a error. The issue was reported over discord: https://discord.com/channels/927474939156643850/1222971118730875020 Possible fix was suggested here: https://github.com/zitadel/zitadel/pull/6999#discussion_r1553503088 This bug only applies to zitadel versions <=2.49.1. |
||
|---|---|---|
| .. | ||
| database | ||
| file | ||
| aes_test.go | ||
| aes.go | ||
| bcrypt.go | ||
| code_mock.go | ||
| code_mocker.go | ||
| code_test.go | ||
| code.go | ||
| crypto_mock.go | ||
| crypto_test.go | ||
| crypto.go | ||
| generate.go | ||
| key_storage.go | ||
| key.go | ||
| passwap_test.go | ||
| passwap.go | ||
| rsa.go | ||