Merge da9c65f5e3 into 13f012fb81

4 days ago · db363d2256
1 changed files with 1 additions and 1 deletions
--- a/server/handlers.go
+++ b/server/handlers.go
@ -960,7 +960,7 @@ func (s *Server) withClientFromStorage(w http.ResponseWriter, r *http.Request, h
 		return
 	}

-	if subtle.ConstantTimeCompare([]byte(client.Secret), []byte(clientSecret)) != 1 {
+	if !client.Public && subtle.ConstantTimeCompare([]byte(client.Secret), []byte(clientSecret)) != 1 {
 		if clientSecret == "" {
 			s.logger.InfoContext(r.Context(), "missing client_secret on token request", "client_id", client.ID)
 		} else {