NotS1mp/Musify
0
0
Fork 0
Code Issues 23 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(frontend): make Zitadel client secret optional (support PKCE apps)

Browse Source 
Configure openid-client with None auth (public client + PKCE) when no secret is
provided, so both PKCE and confidential (Code) Zitadel web apps work.
This commit is contained in:
Admin
2026-07-05 23:01:44 +02:00
parent e7e854959f
commit b28ea023d2
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/lib/server/auth.ts
+7 -7
View File
@@ -25,13 +25,13 @@ export function getOidcConfig(): Promise<client.Configuration> {
const issuer = new URL(env.ZITADEL_ISSUER); const issuer = new URL(env.ZITADEL_ISSUER);
const options = const options =
issuer.protocol === 'http:' ? { execute: [client.allowInsecureRequests] } : undefined; issuer.protocol === 'http:' ? { execute: [client.allowInsecureRequests] } : undefined;
return client.discovery(
issuer, const secret = env.ZITADEL_CLIENT_SECRET;
env.ZITADEL_CLIENT_ID, const hasSecret = !!secret && !secret.startsWith('REPLACE_');
env.ZITADEL_CLIENT_SECRET,
undefined, return hasSecret
options ? client.discovery(issuer, env.ZITADEL_CLIENT_ID, secret, undefined, options)
); : client.discovery(issuer, env.ZITADEL_CLIENT_ID, undefined, client.None(), options);
})(); })();
return configPromise; return configPromise;
} }