Merge pull request #157 from sywesk/master

Fix client secret not being checked
go-oauth2 · Jul 20, 2020 · b46cf9f · b46cf9f
2 parents 201391a + b36d9c4
commit b46cf9f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/manage/manager.go b/manage/manager.go
@@ -261,7 +261,7 @@ func (m *Manager) GenerateAccessToken(ctx context.Context, gt oauth2.GrantType,
 		if !cliPass.VerifyPassword(tgr.ClientSecret) {
 			return nil, errors.ErrInvalidClient
 		}
-	} else if len(tgr.ClientSecret) > 0 && tgr.ClientSecret != cli.GetSecret() {
+	} else if len(cli.GetSecret()) > 0 && tgr.ClientSecret != cli.GetSecret() {
 		return nil, errors.ErrInvalidClient
 	}
 	if tgr.RedirectURI != "" {