AuzerAD: Handle empty client_authentication case (grafana#99437)

AuzerAD: Require client secret when client_authentication is set to empty string
mujin · Jan 23, 2025 · b79f1b2 · b79f1b2
1 parent b034779
commit b79f1b2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/login/social/connectors/azuread_oauth.go b/pkg/login/social/connectors/azuread_oauth.go
@@ -373,7 +373,7 @@ func validateClientAuthentication(info *social.OAuthInfo, requester identity.Req
 		}
 		return nil
 
-	case social.ClientSecretPost:
+	case social.ClientSecretPost, "":
 		if info.ClientSecret == "" {
 			return ssosettings.ErrInvalidOAuthConfig("Client secret is required for Client secret authentication.")
 		}