From c830d49884452f9560141bbbf100e67d2e318f33 Mon Sep 17 00:00:00 2001
From: Tomasz Kleczek <tomasz.kleczek@gmail.com>
Date: Tue, 5 May 2020 17:03:12 +0200
Subject: [PATCH] allow no secret for static public clients
For statically-configured public clients it should be allowed for both
Secret and SecretEnv fields to be empty.
---
cmd/dex/serve.go | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/cmd/dex/serve.go b/cmd/dex/serve.go
index 27fba306..5c8732aa 100644
--- a/cmd/dex/serve.go
+++ b/cmd/dex/serve.go
@@ -166,7 +166,7 @@ func serve(cmd *cobra.Command, args []string) error {
}
c.StaticClients[i].ID = os.Getenv(client.IDEnv)
}
- if client.Secret == "" && client.SecretEnv == "" {
+ if client.Secret == "" && client.SecretEnv == "" && !client.Public {
return fmt.Errorf("invalid config: Secret or SecretEnv field is required for client %q", client.ID)
}
if client.SecretEnv != "" {
--
GitLab