Only return client_secret for confidential clients

10 months ago · ff7dd02d04
parent 190700578b
commit ff7dd02d04
1 changed files with 1 additions and 1 deletions
--- a/app/serializers/rest/credential_application_serializer.rb
+++ b/app/serializers/rest/credential_application_serializer.rb
@ -8,6 +8,6 @@ class REST::CredentialApplicationSerializer < REST::ApplicationSerializer
  end

  def client_secret
-    object.secret
+    object.secret if object.confidential?
  end
 end