Only return client_secret for confidential clients

This commit is contained in:
Emelia Smith 2024-05-16 17:13:58 +02:00
parent 190700578b
commit ff7dd02d04
No known key found for this signature in database

View file

@ -8,6 +8,6 @@ class REST::CredentialApplicationSerializer < REST::ApplicationSerializer
end
def client_secret
object.secret
object.secret if object.confidential?
end
end